Buffer Overflow Vulnerability in NetX Duo SNMP Addon by ThreadX

CVE-2026-102718

What is CVE-2026-102718?

The NetX Duo SNMP addon in ThreadX is vulnerable to a buffer overflow due to improper validation of the OID data length when using BER multibyte length encoding. This vulnerability allows attackers to send crafted SNMP packets with malicious OID lengths larger than the available buffer. As a result, this could lead to out-of-bounds (OOB) memory reads into adjacent heap memory, with severe consequences. On systems equipped with memory protection, this may trigger crashes in the SNMP agent thread, resulting in denial of service. Conversely, on bare-metal embedded systems lacking memory protection, the OOB read may succeed silently, corrupting the internal state of the SNMP agent with heap data and potentially leading to further exploitation.

References