Memory Protection Flaw in ThreadX Affected by Vulnerability

CVE-2026-102757

What is CVE-2026-102757?

An unprivileged ThreadX module exploits a vulnerability that allows it to read and write memory in privileged mode, potentially bypassing memory protection safeguards. This occurs when the Module Manager incorrectly determines whether a request to dereference an object address is valid, allowing attackers to manipulate control blocks and utilize privileged operations such as memset over arbitrary memory ranges. Such exploitation can lead to severe security risks, as it compromises the isolation boundaries intended to protect the system's integrity.

References