Repository navigation
Security: eclipse-threadx/threadx
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operationGHSA-67ww-q8x2-g487 published
Nov 1, 2026 by fdesbiensModerate -
Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged modeGHSA-c38r-v552-gh5g published
Nov 1, 2026 by fdesbiensHigh -
User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not ownGHSA-5q6x-rxf3-5q5f published
Nov 1, 2026 by fdesbiensModerate -
User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilegeGHSA-q2rc-f35r-2hw6 published
Nov 1, 2026 by fdesbiensHigh -
ThreadX Modules invokes trace-full callbacks after module unloadGHSA-8pgj-qvjv-j4fq published
Nov 1, 2026 by fdesbiensHigh -
Module Manager passes an unvalidated `tx_trace_buffer_full_notify` callback to the kernel, which invokes it in privileged contextGHSA-xr9m-8j99-rw4m published
Nov 1, 2026 by fdesbiensHigh -
Deleting a user-mode module thread leaks its privileged kernel stackGHSA-9hhf-6357-hpgq published
Oct 2, 2026 by fdesbiensModerate -
Module block-pool create validates two of the four parameter words it readsGHSA-5w57-xhwq-v7wq published
Oct 2, 2026 by fdesbiensModerate -
Module Manager object lookup validates one byte of a module's search nameGHSA-39rx-hq8c-4px8 published
Oct 2, 2026 by fdesbiensModerate -
Module queue front-send validates a word count as a byte countGHSA-rrg6-24r9-wqpm published
Oct 2, 2026 by fdesbiensModerate