{"affected":[{"defaultStatus":"unaffected","product":"Eclipse ThreadX NetX Duo","source":"CNA: eclipse","vendor":"Eclipse Foundation","versions":[{"lessThanOrEqual":"6.5.2.202603","status":"affected","version":"0","versionType":"custom"},{"status":"unaffected","version":"6.5.2.202603a","versionType":"custom"}]}],"cveId":"CVE-2026-102715","cwes":["CWE-787","CWE-697"],"description":"In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the mDNS add-on's string cache accepts a shorter name as a match for a longer stored one. A host on the local link can send two mDNS records that make a device performing continuous service discovery write up to three bytes past its transmit packet, corrupting a neighbouring packet or the pool's free list, and misattribute discovered records.","epss":{"date":"2026-11-03","percentile":0.04463,"score":0.00153},"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: eclipse","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793797887951,"publishedAt":1790703755719,"references":[{"source":"CNA: eclipse","tags":[],"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-2gf7-5224-5vrj"}],"remediation":[],"revision":"fffb5c2073394b339a17ac73114e0a4ef16ddfc8ebf44405fc6d3993b5341775","sources":[{"modifiedAt":1793797887951,"name":"CNA: eclipse","retrievedAt":1793801315787,"url":"https://www.cve.org/CVERecord?id=CVE-2026-102715"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793801408693,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-102715"}],"ssvc":{"assessedAt":1790707307412,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet","updatedAt":1793801408693}