CVE-2026-115231
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
42/100
Published: 2026-11-03
Modified: 2026-11-03
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
AT:
None
VC:
High
VI:
High
VA:
High
Description
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that the Module Manager sent it, so the attacker's code runs with the receiving module's privilege; when that module runs in privileged mode, a user-mode module gains privileged execution.
Weakness Classification (2)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Eclipse Foundation | Eclipse ThreadX | 6.0.1 |
| Eclipse Foundation | Eclipse ThreadX | 6.0.1 |