CVE-2026-92446: CWE-125 Out-of-bounds Read in Eclipse Foundation Eclipse ThreadX - GUIX

The vulnerability arises from gx_binres_theme_load() and gx_binres_font_load() functions in Eclipse ThreadX - GUIX, which process resource data buffers without length metadata. GX_BINRES_DATA_INFO does not include a length field, so reads are performed at offsets specified by the resource file without bounds checking. If a resource declares more data than it contains, the functions read past the buffer's end, resulting in an out-of-bounds read (CWE-125). This defect is distinct from a previously reported underflow issue (GHSA-hgcj-22cg-4hfv) and does not require underflow or integer wrap conditions to trigger. The vulnerability affects all versions up to and including 6.5.1.202602a.

An attacker could cause the software to read memory beyond the intended buffer boundaries, potentially leading to information disclosure or application instability. The CVSS vector indicates local attack vector with low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality and availability. There is no indication of known exploits in the wild.

No vendor advisory or patch information is provided, and no official fix is confirmed. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted resource files with the affected functions to mitigate risk.