Null Pointer Dereference Vulnerability in Eclipse ThreadX NetX Duo Networking Stack

CVE-2026-114408

What is CVE-2026-114408?

A vulnerability exists in the Eclipse ThreadX NetX Duo networking stack due to improper checks in the ICMPv6 Packet Too Big handler. This flaw occurs when the destination table is manipulated by sending a series of malformed Packet Too Big messages, leading to the potential dereference of a NULL pointer. As a result, the IP helper thread may crash, disrupting all network processing capabilities. This vulnerability poses a significant risk in environments that depend on robust network communication, as it could lead to substantial disruptions in service.

References