CVE-2026-95107: CWE-190 Integer Overflow or Wraparound in Eclipse Foundation Eclipse ThreadX

The vulnerability arises in a ThreadX module that selects an object size and calls txm_module_object_allocate. The Module Manager adds a 16-byte private header to the requested size but does not verify if this addition causes an integer overflow. If the size is near the maximum value of a ULONG, the addition wraps around, resulting in a smaller allocation than required. Consequently, the Module Manager writes the header beyond the allocated block, corrupting adjacent memory in the byte-pool. This is classified under CWE-190 (Integer Overflow), CWE-680 (Integer Overflow to Buffer Overflow), and CWE-787 (Out-of-bounds Write).

This vulnerability can lead to memory corruption due to writing beyond the allocated buffer, potentially causing system instability, crashes, or escalation of privileges depending on the context of use. The CVSS 4.0 score is 7 (high severity), indicating significant impact with local attack vector, low complexity, no user interaction, and high impact on confidentiality and integrity.

No patch or official fix information is currently provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should carefully validate input sizes and avoid passing sizes near ULONG maximum values to the affected allocation function if possible.