Eclipse Foundation Eclipse ThreadX - GUIX

• CVE-2026-91057 Medium 4.6 Out-of-bounds read when a multi-line text view string ends with a carriage return 0.2%
• CVE-2026-92454 Medium 6.1 JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode 0.2%
• CVE-2026-91059 Medium 6.8 JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size 0.2%
• CVE-2026-91189 High 7.1 GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme 0.1%
• CVE-2026-92446 Medium 6.8 GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader 0.2%
• CVE-2026-92449 Medium 6.8 Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena 0.2%
• CVE-2026-91186 High 8.4 PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write 0.2%