What’s Vulnerable › Vulnerabilities
CVE-2026-91057: Out-of-bounds read when a multi-line text view string ends with a carriage return
- Severity: medium (CVSS 4.6 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-20 · updated 2026-10-20
- Weakness: CWE-125
Description
`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return (`\r`). The over-read can also cause callers to advance their index past the end of the string, producing a second over-read in `_gx_multi_line_text_view_string_total_rows_compute()` and a row of text that is not in the source.
Affected products
- Eclipse Foundation Eclipse ThreadX - GUIX: through 6.5.1.202602a
References
Get alerted when CVE-2026-91057 or the next vulnerability affects your stack