What’s Vulnerable › Products

Eclipse Foundation Eclipse ThreadX vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your Eclipse Foundation Eclipse ThreadX version is affected

Latest Eclipse Foundation Eclipse ThreadX vulnerabilities

• CVE-2026-95109 — Cortex-A7 module data validation checks only the first address of a caller-supplied range (CVSS 8.5)
• CVE-2026-95108 — Deleting a user-mode module thread leaks its privileged kernel stack (CVSS 6.8)
• CVE-2026-95107 — Module object allocation size overflow corrupts the manager object pool (CVSS 7.0)
• CVE-2026-94202 — Module block-pool create validates two of the four parameter words it reads (CVSS 4.8)
• CVE-2026-94192 — Module object deallocation can free a live ThreadX kernel object (CVSS 8.5)
• CVE-2026-94024 — Module Manager object lookup validates one byte of a module's search name (CVSS 6.9)
• CVE-2026-94023 — Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion (CVSS 6.9)
• CVE-2026-95111 — Module queue front-send validates a word count as a byte count (CVSS 4.8)
• CVE-2026-0648 — (CVSS 6.3)
• CVE-2025-55080 — Improper Parameter Check in ThreadX Syscall Implementation (CVSS 7.1)
• CVE-2025-55079 — Missing check for thread priority (CVSS 5.5)
• CVE-2025-55078 — Incomplete validation of kernel object pointers in system calls (CVSS 5.5)
• CVE-2024-2214 — Missing array size check in _Mtxinit() in the Xtensa port (CVSS 7.8)
• CVE-2024-2212 — Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet() (CVSS 7.8)