Eclipse ThreadX - GUIX vulnerabilities

2 known vulnerabilities in Eclipse ThreadX - GUIX from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Eclipse ThreadX - GUIX: Integer Overflow or Wraparound

  CVE-2026-91189Oct 20, 2026Eclipse Foundation

  The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are read verbatim from the file and only the upper bound of `last_glyph` is validated, so a page declaring

• 8.4 High severity

  Eclipse ThreadX - GUIX: Out-of-bounds Read

  CVE-2026-91186Oct 20, 2026Eclipse Foundation

  The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency, but nothing prevents an IHDR being read a second time. A PNG carries exactly one IHDR and it is the first chunk