CVE-2026-115231
Received Received - Intake

Memory Corruption in Eclipse ThreadX via Callback Queue

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Eclipse Foundation

Description
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that the Module Manager sent it, so the attacker's code runs with the receiving module's privilege; when that module runs in privileged mode, a user-mode module gains privileged execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-115231
EUVD
EUVD-2026-115718

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Eclipse Foundation Eclipse ThreadX 6.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Eclipse ThreadX versions 6.0.1 through 6.5.2.202603 allows a user-mode, memory-protected module to forge a callback request and post it to another module's callback queue. The receiving module's callback thread executes the function pointer in the request without verifying its origin, letting the attacker's code run with the receiving module's privileges. If the receiving module runs in privileged mode, this grants the user-mode module elevated execution rights.

Impact Analysis

An attacker could exploit this to gain privileged execution or disrupt operations of the receiving module. This could lead to unauthorized access, data breaches, or system compromise, depending on the module's role and privileges.

Mitigation Strategies
  • Upgrade Eclipse ThreadX to version 6.5.2.202603b or later, as this version includes a patch that rejects unauthorized callback requests from memory-protected modules.
  • Review and restrict module permissions to minimize the impact of potential privilege escalation by ensuring only trusted modules can interact with callback queues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-115231. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...