CVE-2026-91057: CWE-125 Out-of-bounds Read in Eclipse Foundation Eclipse ThreadX - GUIX

The vulnerability involves an out-of-bounds read in the GUIX component of Eclipse ThreadX. Specifically, the function _gx_multi_line_text_view_display_info_get() reads one byte past the end of the input text buffer when the string ends with a carriage return character. This initial over-read can cause the caller to advance its index beyond the string's end, triggering a second out-of-bounds read in _gx_multi_line_text_view_string_total_rows_compute(). This results in a row of text being processed that does not exist in the original source buffer.

This vulnerability may lead to reading memory beyond the intended buffer, which can cause application instability or incorrect behavior in text rendering. The CVSS score of 4.6 (medium severity) indicates limited impact with local attack vector, requiring user interaction and low privileges. There is no indication of remote exploitation or privilege escalation.

No official patch or fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing input strings that end with a carriage return in the affected component or apply input validation to prevent such cases.