agentprime: eclipse-foundation-eclipse-threadxEvery new CVE for eclipse-foundation-eclipse-threadx.https://agentprime.io/CVE-2026-113421: ThreadX Modules invokes trace-full callbacks after module unloadhttps://agentprime.io/advisories/CVE-2026-113421/https://agentprime.io/advisories/CVE-2026-113421/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 08:27:59 GMTCVECVE-2026-115231: User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilegehttps://agentprime.io/advisories/CVE-2026-115231/https://agentprime.io/advisories/CVE-2026-115231/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 08:23:02 GMTCVECVE-2026-115215: NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session poolhttps://agentprime.io/advisories/CVE-2026-115215/https://agentprime.io/advisories/CVE-2026-115215/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 21:43:53 GMTCVECVE-2026-115403: NULL pointer dereference in the BSD raw IPv6 send path when the destination table is fullhttps://agentprime.io/advisories/CVE-2026-115403/https://agentprime.io/advisories/CVE-2026-115403/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 21:40:21 GMTCVECVE-2026-115654: User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not ownhttps://agentprime.io/advisories/CVE-2026-115654/https://agentprime.io/advisories/CVE-2026-115654/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:15:38 GMTCVECVE-2026-115653: Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged modehttps://agentprime.io/advisories/CVE-2026-115653/https://agentprime.io/advisories/CVE-2026-115653/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:10:18 GMTCVECVE-2026-118052: Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operationhttps://agentprime.io/advisories/CVE-2026-118052/https://agentprime.io/advisories/CVE-2026-118052/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 14:57:27 GMTCVECVE-2026-95107: Module object allocation size overflow corrupts the manager object poolhttps://agentprime.io/advisories/CVE-2026-95107/https://agentprime.io/advisories/CVE-2026-95107/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:20:15 GMTCVECVE-2026-94202: Module block-pool create validates two of the four parameter words it readshttps://agentprime.io/advisories/CVE-2026-94202/https://agentprime.io/advisories/CVE-2026-94202/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:19:43 GMTCVECVE-2026-95108: Deleting a user-mode module thread leaks its privileged kernel stackhttps://agentprime.io/advisories/CVE-2026-95108/https://agentprime.io/advisories/CVE-2026-95108/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:19:16 GMTCVECVE-2026-94024: Module Manager object lookup validates one byte of a module's search namehttps://agentprime.io/advisories/CVE-2026-94024/https://agentprime.io/advisories/CVE-2026-94024/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:18:28 GMTCVECVE-2026-94023: Module delete dispatchers do not enforce kernel-object ownership before irreversible deletionhttps://agentprime.io/advisories/CVE-2026-94023/https://agentprime.io/advisories/CVE-2026-94023/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:18:09 GMTCVECVE-2026-95109: Cortex-A7 module data validation checks only the first address of a caller-supplied rangehttps://agentprime.io/advisories/CVE-2026-95109/https://agentprime.io/advisories/CVE-2026-95109/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:17:20 GMTCVECVE-2026-94192: Module object deallocation can free a live ThreadX kernel objecthttps://agentprime.io/advisories/CVE-2026-94192/https://agentprime.io/advisories/CVE-2026-94192/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:15:06 GMTCVECVE-2026-95111: Module queue front-send validates a word count as a byte counthttps://agentprime.io/advisories/CVE-2026-95111/https://agentprime.io/advisories/CVE-2026-95111/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 14:35:40 GMTCVECVE-2026-102711: Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loaderhttps://agentprime.io/advisories/CVE-2026-102711/https://agentprime.io/advisories/CVE-2026-102711/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:38:22 GMTCVECVE-2026-102710: Improper privilege management in Eclipse Foundation Eclipse ThreadXhttps://agentprime.io/advisories/CVE-2026-102710/https://agentprime.io/advisories/CVE-2026-102710/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:37:04 GMTCVECVE-2026-102709: Information disclosure in Eclipse Foundation Eclipse ThreadXhttps://agentprime.io/advisories/CVE-2026-102709/https://agentprime.io/advisories/CVE-2026-102709/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:36:17 GMTCVECVE-2026-0648: The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the return value of osek_get…https://agentprime.io/advisories/CVE-2026-0648/https://agentprime.io/advisories/CVE-2026-0648/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 15:40:31 GMTCVE