Eclipse ThreadX — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Eclipse ThreadX, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-95107	Module object allocation size overflow corrupts the manager object pool CWE-190	7.0	High	2026-10-20
CVE-2026-94202	Module block-pool create validates two of the four parameter words it reads CWE-125	4.8	Medium	2026-10-20
CVE-2026-95108	Deleting a user-mode module thread leaks its privileged kernel stack CWE-400	6.8	Medium	2026-10-20
CVE-2026-94024	Module Manager object lookup validates one byte of a module's search name CWE-125	6.9	Medium	2026-10-20
CVE-2026-94023	Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion CWE-125	6.9	Medium	2026-10-20
CVE-2026-95109	Cortex-A7 module data validation checks only the first address of a caller-supplied range CWE-125	8.5	High	2026-10-20
CVE-2026-94192	Module object deallocation can free a live ThreadX kernel object CWE-416	8.5	High	2026-10-20
CVE-2026-95111	Module queue front-send validates a word count as a byte count CWE-125	4.8	Medium	2026-10-20
CVE-2026-0648	Eclipse ThreadX USBX 安全漏洞 CWE-253	7.8	High	2026-01-27

All 9 known CVE vulnerabilities affecting Eclipse ThreadX with full Chinese analysis, references, and POCs where available.