Memory Vulnerability in ThreadX Module Manager Affecting Eclipse Foundation
CVE-2026-95111

4.8MEDIUM

Key Information:

Vendor
CVE Published:
20 October 2026

What is CVE-2026-95111?

A memory management issue exists in the Module Manager of the ThreadX operating system. A compromise arises when the queue request inappropriate allows access beyond the module's defined memory buffer. This can lead to unauthorized reading of memory that may compromise data integrity. The improper handling of queue message sizes results in potential exploitation where messages beyond allowed limits can be read, leading to potential information leaks and stability risks for applications utilizing the affected versions of ThreadX.

Affected Version(s)

Eclipse ThreadX 6.0.1 <= 6.5.1.202602a

Eclipse ThreadX 6.5.2.202603

References

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

fdesbiens
SounLabs
.