eclipse_threadx_netx_duo vulnerabilities

CVEs whose affected-version data names the eclipse_threadx_netx_duo package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114408High· 8.7

4d ago

NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full

In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on …

▾ TwilightEclipse Foundation · Eclipse ThreadX NetX DuoEPSS 0.36%via CVEORG