CVE-2026-91057GHSA-4qjc-2g93-36m2
Eclipse ThreadX - GUIX: Out-of-bounds read when a multi-line text view string ends with a carriage return
Eclipse Foundation Eclipse ThreadX - GUIX
CVSS
4.6MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.16%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
_gx_multi_line_text_view_display_info_get() reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return (\r). The over-read can also cause callers to advance their index past the end of the string, producing a second over-read in _gx_multi_line_text_view_string_total_rows_compute() and a row of text that is not in the source.
Text from CVE List
Affected versions 2
- Eclipse ThreadX - GUIXaffected: all versions through 6.5.1.202602aCVE List
- Eclipse ThreadX - GUIXunaffected: 6.5.2.202603CVE List