CVE-2026-92446
Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in ThreadX GX BinRes Loader

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Eclipse Foundation

Description
`gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BINRES_DATA_INFO` has no field to carry one. Every read is therefore performed at an offset the file itself chose, against a buffer whose extent the loader does not know. A resource that declares more data than it contains is read past its end, and an offset stored in the file is turned into a pointer without being bounded. This is a distinct defect from GHSA-hgcj-22cg-4hfv, which was an underflowed glyph count. It needs no underflow and no wrapped multiply: a perfectly well-formed, narrow glyph range reaches it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-11-09
AI Q&A
2026-10-20
EPSS Evaluated
2026-11-08
NVD
CVE-2026-92446
EUVD
EUVD-2026-105037

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Eclipse Foundation Eclipse ThreadX - GUIX 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves two functions in the GUIX binary resource loader that read data without knowing the buffer length. Resources can declare more data than they contain, causing out-of-bounds reads. Additionally, file-supplied offsets are used directly as pointers without validation, allowing attackers to manipulate memory access during glyph rendering.

Detection Guidance

Detecting this vulnerability requires inspecting GUIX binary resource files for malformed data. Check for resources declaring more data than they contain or invalid offsets. Use tools like hex editors or custom scripts to parse GUIX binary resource files and validate their structure against expected formats.

Impact Analysis

This vulnerability can lead to crashes, memory disclosure, or arbitrary memory access when glyphs are drawn. Attackers could exploit it to read sensitive data or cause denial-of-service conditions. Systems using GUIX versions up to 6.5.1.202602a are affected.

Compliance Impact

This vulnerability could lead to memory disclosure or crashes, potentially exposing sensitive data processed by the GUIX library. Such issues may violate GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Upgrade GUIX to version 6.5.2.202603 or later, which includes length checks and offset validation. If upgrading is not possible, avoid loading binary resources from untrusted sources or disable binary resource support entirely to prevent exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92446. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...