Eclipse / ThreadX
14 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-102709 | Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secur… | HIGH | 8.4 | Sep 29, 2026 |
| CVE-2026-102757 | An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that t… | HIGH | 8.5 | Sep 29, 2026 |
| CVE-2026-0648 | The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) wh… | HIGH | 7.8 | Jan 27, 2026 |
| CVE-2025-55080 | Improper Parameter Check in ThreadX Syscall Implementation | HIGH | 7.2 | Oct 15, 2025 |
| CVE-2025-55079 | Missing check for thread priority | MEDIUM | 5.7 | Oct 15, 2025 |
| CVE-2025-55078 | Incomplete validation of kernel object pointers in system calls | MEDIUM | 5.7 | Oct 14, 2025 |
| CVE-2025-2259 | Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow | MEDIUM | 5.3 | Apr 6, 2025 |
| CVE-2025-2260 | Eclipse ThreadX NetX Duo HTTP component server denial of service | HIGH | 7.1 | Apr 6, 2025 |
| CVE-2025-2258 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow | MEDIUM | 5.3 | Apr 6, 2025 |
| CVE-2025-0727 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow | MEDIUM | 5.3 | Feb 21, 2025 |
| CVE-2025-0728 | Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow | MEDIUM | 5.3 | Feb 21, 2025 |
| CVE-2025-0726 | Eclipse ThreadX NetX Duo HTTP server denial of service | HIGH | 7.1 | Feb 21, 2025 |
| CVE-2024-2212 | Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet() | HIGH | 7.8 | Mar 26, 2024 |
| CVE-2024-2214 | Missing array size check in _Mtxinit() in the Xtensa port | HIGH | 7.8 | Mar 26, 2024 |
| CVE-2024-2452 | Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc() | CRITICAL | 9.8 | Mar 26, 2024 |
Showing 1 to 14 of 14 CVEs