User-Mode Memory Protection Vulnerability in ThreadX by Express Logic

CVE-2026-102710

What is CVE-2026-102710?

The vulnerability allows an attacker to exploit a user-mode, memory-protected module that can register arbitrary function pointers for global trace-full callbacks. With this setup, the kernel directly invokes these pointers without validation—a design oversight. This could lead to a denial-of-service condition triggered by an invalid pointer. Additionally, it has been observed that pointers can escalate privileges by executing code with kernel-level access, which was confirmed through runtime analysis.

References