Eclipse ThreadX - GUIX — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Eclipse ThreadX - GUIX, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-91057	Out-of-bounds read when a multi-line text view string ends with a carriage return CWE-125	4.6	Medium	2026-10-20
CVE-2026-92454	JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode CWE-125	6.1	Medium	2026-10-20
CVE-2026-91059	JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size CWE-125	6.8	Medium	2026-10-20
CVE-2026-91189	GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme CWE-190	7.1	High	2026-10-20
CVE-2026-92446	GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader CWE-125	6.8	Medium	2026-10-20
CVE-2026-92449	Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena CWE-129	6.8	Medium	2026-10-20
CVE-2026-91186	PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write CWE-125	8.4	High	2026-10-20

All 7 known CVE vulnerabilities affecting Eclipse ThreadX - GUIX with full Chinese analysis, references, and POCs where available.