CVE-2026-102711
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
39/100
Published: 2026-09-29
Modified: 2026-11-04
First seen: 2026-11-04
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
High
VI:
None
VA:
Low
Description
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders take a module image without its length and trust the sizes and offsets in its preamble. A crafted module image can declare a code size larger than the image to read, or gain access to, the memory that follows it, and can place its entry points outside its code.
Weakness Classification (3)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| Eclipse Foundation | Eclipse ThreadX | 6.0.1 |