Out-of-Bounds Heap Write Vulnerability in Eclipse ThreadX FileX

CVE-2026-91041

What is CVE-2026-91041?

This vulnerability allows an attacker to mount a controlled FAT image with fault tolerance enabled, leading to an out-of-bounds heap write during the log replay process. The exploit can manipulate the write address and value, potentially redirecting execution to unauthorized locations by reaching the FX_MEDIA driver callback. This presents significant security risks, especially within susceptible embedded systems.

References