Threats tagged 'ghsa-w4rq-vh43-v5q5'

CVE-2026-102711 is an out-of-bounds read vulnerability in Eclipse ThreadX versions 6.0.1 through 6.5.2.202603. The vulnerability arises because the Module Manager loaders trust the sizes and offsets declared in a module image preamble without verifying the actual image length. A crafted module image can declare a larger code size than the actual image, allowing reading or accessing memory beyond the intended boundaries and placing entry points outside the legitimate code area.