Buffer Overread Vulnerability in Eclipse ThreadX GUIX

CVE-2026-91057

What is CVE-2026-91057?

The vulnerability arises from the _gx_multi_line_text_view_display_info_get() function, which improperly handles text input, leading to reading beyond the allocated memory buffer. Specifically, when the input string terminates with a carriage return ( ), it results in an over-read. This condition can also cause the index to overshoot the end of the string, triggering additional over-read scenarios in the _gx_multi_line_text_view_string_total_rows_compute() function, potentially revealing sensitive information that isn't part of the original source.

References