CVE-2026-102711Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader

Description

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders take a module image without its length and trust the sizes and offsets in its preamble. A crafted module image can declare a code size larger than the image to read, or gain access to, the memory that follows it, and can place its entry points outside its code.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-f53h-37j4-mqxx