CVE-2026-95109
Last modified
CVE-2026-95109 is a high-severity vulnerability rated 8.5/10 on the CVSS scale. The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands its range check the module instance, the start address and the complete byte size; the Cortex-A7 implementation discarded the instance and the size and asked the MMU a single question about the start. A memory-protected module therefore passed any range whose first byte was user-readable, however far the rest of it reached.
Description
The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands its range check the module instance, the start address and the complete byte size; the Cortex-A7 implementation discarded the instance and the size and asked the MMU a single question about the start. A memory-protected module therefore passed any range whose first byte was user-readable, however far the rest of it reached. Privileged dispatch code then read or wrote the whole range. Because every protected-module dispatcher that consumes a buffer or an extra-parameter array goes through this one macro, the defect is not in any individual service: it is in the primitive all of them rely on.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Eclipse Foundation | Eclipse ThreadX | >= 6.1, <= 6.5.1.202602a |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-95109?
How severe is CVE-2026-95109?
How do I fix CVE-2026-95109?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-95102WebSocket endpoints lack proper authentication mechanisms, e…9.4
- CVE-2026-95104Stack-based buffer overflow vulnerability exists in BUFFALO …7.5
- CVE-2026-95105Reliance on Obfuscation or Encryption of Security-Relevant I…8.2
- CVE-2026-95106Gitea accepted pushed Git trees containing two entries with …9.1
- CVE-2026-95107A ThreadX module chooses `object_size` when it calls `txm_mo…7
- CVE-2026-95108One logical thread of a user-mode ThreadX module costs the M…6.8
- CVE-2026-9511A vulnerability was identified in Totolink CA750-PoE 6.2c.51…6.3
- CVE-2026-95111A memory-protected ThreadX module's queue request reaches th…4.8
- CVE-2026-95112When processing issue and comment bodies, Gitea scanned the …6.5
- CVE-2026-95114libwebsockets contains an out-of-bounds read vulnerability i…7.5
- CVE-2026-95115Buffer Overflow vulnerability in libwebsockets main 106d542c…7.5
- CVE-2026-95116An issue in libming through 0.4.8 allows a remote attacker t…7.5
Are you affected by CVE-2026-95109?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST