What’s Vulnerable › Products

Eclipse Foundation Eclipse ThreadX - GUIX vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Eclipse Foundation Eclipse ThreadX - GUIX version is affected

Latest Eclipse Foundation Eclipse ThreadX - GUIX vulnerabilities

• CVE-2026-91057 — Out-of-bounds read when a multi-line text view string ends with a carriage return (CVSS 4.6)
• CVE-2026-92454 — JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode (CVSS 6.1)
• CVE-2026-92449 — Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena (CVSS 6.8)
• CVE-2026-92446 — GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader (CVSS 6.8)
• CVE-2026-91189 — GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme (CVSS 7.1)
• CVE-2026-91186 — PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write (CVSS 8.4)
• CVE-2026-91059 — JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size (CVSS 6.8)