Eclipse Foundation ThreadX

• CVE-2026-102757 High 8.5 An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU enable bit and remove its 0.1%
• CVE-2025-55080 High 7.2 Improper Parameter Check in ThreadX Syscall Implementation 0.1%
• CVE-2025-55079 Medium 5.7 Missing check for thread priority 0.2%
• CVE-2025-55078 Medium 5.7 Incomplete validation of kernel object pointers in system calls 0.2%
• CVE-2025-2259 Medium 5.3 Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow 1.0%
• CVE-2025-2260 High 7.1 Eclipse ThreadX NetX Duo HTTP component server denial of service 1.0%
• CVE-2025-2258 Medium 5.3 Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow 1.0%
• CVE-2025-0727 Medium 5.3 Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow 0.8%
• CVE-2025-0728 Medium 5.3 Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow 0.8%
• CVE-2025-0726 High 7.1 Eclipse ThreadX NetX Duo HTTP server denial of service 0.8%
• CVE-2024-2212 High 7.3 Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet() 0.5%
• CVE-2024-2214 High 7.0 Missing array size check in _Mtxinit() in the Xtensa port 0.3%
• CVE-2024-2452 High 7.0 Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc() 0.9%