Memory Protection Bypass in ThreadX Module Manager by Eclipse

CVE-2026-94024

What is CVE-2026-94024?

A critical memory protection issue in the ThreadX Module Manager allows unauthorized access through insufficient validation of memory module names. The affected lookup functions fail to adequately bound the memory buffer size, which can result in unregulated memory access. This vulnerability poses a risk of allowing affected modules to explore memory regions without proper restrictions, potentially leading to system instability and denial of service as the kernel's preemption capabilities can be compromised.

References