Eclipse Threadx - Guix (Eclipse Foundation) - vulnerabilities (CVEs)
7 CVEs, 7 in the last 30 days, 1 known versions, newest CVE from 2026-10-20. Vendor: Eclipse Foundation.
CVEs of Eclipse Threadx - Guix
- CVE-2026-91057 - CVSS 4.6 (medium), 2026-10-20: `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a carriage…
- CVE-2026-92454 - CVSS 6.8 (medium), 2026-10-20: The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is…
- CVE-2026-91059 - CVSS 6.8 (medium), 2026-10-20: The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS` re-runs the frame header…
- CVE-2026-91189 - CVSS 7.1 (high), 2026-10-20: The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are…
- CVE-2026-92446 - CVSS 6.8 (medium), 2026-10-20: `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BINRES_DATA_INFO` has no field to carry…
- CVE-2026-92449 - CVSS 6.8 (medium), 2026-10-20: `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource file and…
- CVE-2026-91186 - CVSS 8.4 (high), 2026-10-20: The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency, but…
