Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-84975 | high | 7.4 | No | PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib... | 2026-10-20 |
| CVE-2026-95109 | not reported | — | No | The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager... | 2026-10-20 |
| CVE-2026-95108 | not reported | — | No | One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for... | 2026-10-20 |
| CVE-2026-95107 | not reported | — | No | A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to... | 2026-10-20 |
| CVE-2026-94202 | not reported | — | No | The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memory-protected module... | 2026-10-20 |
| CVE-2026-94192 | not reported | — | No | A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back... | 2026-10-20 |
| CVE-2026-94024 | not reported | — | No | The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much of it as the module... | 2026-10-20 |
| CVE-2026-94023 | not reported | — | No | A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question about the po... | 2026-10-20 |
| CVE-2026-94018 | not reported | — | No | The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processin... | 2026-10-20 |
| CVE-2026-93475 | not reported | — | No | The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffer... | 2026-10-20 |
| CVE-2026-93003 | not reported | — | No | The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header section. A he... | 2026-10-20 |
| CVE-2026-92853 | not reported | — | No | The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that t... | 2026-10-20 |
| CVE-2026-92843 | not reported | — | No | A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer... | 2026-10-20 |
| CVE-2026-91057 | not reported | — | No | `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends... | 2026-10-20 |
| CVE-2026-97400 | not reported | — | No | In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause... | 2026-10-20 |
| CVE-2026-96402 | not reported | — | No | A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap... | 2026-10-20 |
| CVE-2026-95111 | not reported | — | No | A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the module's buffer... | 2026-10-20 |
| CVE-2026-92454 | medium | 6.1 | No | The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncat... | 2026-10-20 |
| CVE-2026-92449 | not reported | — | No | `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the... | 2026-10-20 |
| CVE-2026-92446 | not reported | — | No | `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BINRES_DATA_INFO` has... | 2026-10-20 |