{"affected":[{"defaultStatus":"unaffected","product":"Eclipse ThreadX","source":"CNA: eclipse","vendor":"Eclipse Foundation","versions":[{"lessThanOrEqual":"6.5.2.202603","status":"affected","version":"6.0.1","versionType":"custom"}]}],"cveId":"CVE-2026-118052","cwes":["CWE-667","CWE-833"],"description":"In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such an image blocks every later module load, start, stop and unload from other threads until the system is reset.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.8,"severity":"medium","source":"CNA: eclipse","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793631447483,"publishedAt":1793631447483,"references":[{"source":"CNA: eclipse","tags":[],"url":"https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-67ww-q8x2-g487"},{"source":"CNA: eclipse","tags":[],"url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/511"}],"remediation":[],"revision":"450430511821b2e912e5e0a6384132c983fd7c2d1d6fb476850a5b284f0dbe58","sources":[{"modifiedAt":1793631447483,"name":"CNA: eclipse","retrievedAt":1793632108685,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118052"}],"ssvc":null,"status":"published","title":"Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation","updatedAt":1793632108685}