Advisories · Technology

Eclipse Foundation Eclipse ThreadX - USBX.

Every CVE that names Eclipse Foundation Eclipse ThreadX - USBX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96402 CVE record

CVSS 5.2 Medium

USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count
- Eclipse Foundation Eclipse ThreadX - USBX
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-96406 CVE record

CVSS 4.9 Medium

VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound
- Eclipse Foundation Eclipse ThreadX - USBX
- Memory corruption
Not analysed yet 20 Oct 2026
CVE-2026-96582 CVE record

CVSS 4.9 Medium

Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser
- Eclipse Foundation Eclipse ThreadX - USBX
- Memory corruption
- CWE-1285
Not analysed yet 20 Oct 2026
CVE-2025-55095 CVE record

CVSS 4.2 Medium

Stack-based buffer overflow in Eclipse Foundation Eclipse ThreadX - USBX
- Eclipse Foundation Eclipse ThreadX - USBX
- Memory corruption
- Denial of service
Not analysed yet 27 Jan 2026