Out-of-bounds Read Vulnerability in Eclipse ThreadX Network Stack

CVE-2026-102725

What is CVE-2026-102725?

An out-of-bounds read vulnerability exists in the Eclipse ThreadX Network Stack due to an unvalidated MSRP attribute list length. This flaw allows an attacker to potentially read sensitive information beyond the intended buffer, leading to data exposure and integrity risks. Proper validation mechanisms should be implemented to prevent exploitation of this vulnerability.

References