CVE-2026-91041: CWE-787 Out-of-bounds Write in Eclipse Foundation Eclipse ThreadX - FileX

This vulnerability (CVE-2026-91041) in Eclipse ThreadX - FileX arises from an out-of-bounds heap write when an attacker-controlled FAT image is mounted with fault tolerance enabled. The heap write occurs during log replay and is both attacker-positioned and attacker-valued. On typical embedded memory layouts, this out-of-bounds write can reach the FX_MEDIA driver callback, enabling the attacker to gain control over the instruction pointer. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The affected versions are from 0 up to and including 6.5.1.202602.

Successful exploitation allows an attacker with local access (low attack vector) and no privileges to execute code with elevated control by manipulating the instruction pointer. This can lead to full compromise of the affected embedded system, impacting confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, avoid mounting untrusted FAT images with fault tolerance enabled to mitigate risk.