Advisories · Technology
Eclipse Foundation Eclipse ThreadX.
Every CVE that names Eclipse Foundation Eclipse ThreadX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.3 High
ThreadX Modules invokes trace-full callbacks after module unload
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CVSS 8.5 High
User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege
- Eclipse Foundation Eclipse ThreadX
- Privilege escalation
- Broken access control
- CVSS 8.7 High
NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool
- Eclipse Foundation Eclipse ThreadX
- Denial of service
- CVSS 8.2 High
NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CWE-252
- CVSS 6.9 Medium
User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own
- Eclipse Foundation Eclipse ThreadX
- Broken access control
- CVSS 7.0 High
Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CVSS 6.8 Medium
Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation
- Eclipse Foundation Eclipse ThreadX
- Denial of service
- CWE-667
- CVSS 7.0 High
Module object allocation size overflow corrupts the manager object pool
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CVSS 4.8 Medium
Module block-pool create validates two of the four parameter words it reads
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CVSS 6.8 Medium
Deleting a user-mode module thread leaks its privileged kernel stack
- Eclipse Foundation Eclipse ThreadX
- Denial of service
- CVSS 6.9 Medium
Module Manager object lookup validates one byte of a module's search name
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CWE-1284
- CVSS 6.9 Medium
Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- Broken access control
- CVSS 8.5 High
Cortex-A7 module data validation checks only the first address of a caller-supplied range
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CVSS 8.5 High
Module object deallocation can free a live ThreadX kernel object
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CWE-664
- CVSS 4.8 Medium
Module queue front-send validates a word count as a byte count
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CVSS 6.9 Medium
Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader
- Eclipse Foundation Eclipse ThreadX
- Memory corruption
- CWE-345
- CVSS 8.5 High
Improper privilege management in Eclipse Foundation Eclipse ThreadX
- Eclipse Foundation Eclipse ThreadX
- Privilege escalation
- Memory corruption
- CVSS 8.4 High
Information disclosure in Eclipse Foundation Eclipse ThreadX
- Eclipse Foundation Eclipse ThreadX
- Information disclosure
- Memory corruption
- CVSS 7.8 High
The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get…
- Eclipse Foundation Eclipse ThreadX
- CWE-253