WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
6.4.x	✅

Reporting a Vulnerability

If you think you have found a vulnerability in you can report it using one of the following ways:

Contact the Eclipse Foundation Security Team
Report a Vulnerability

You can find more information about reporting and disclosure at the Eclipse Foundation Security page.

Security Policy

This project follows Eclipse Foundation Vulnerability Reporting Policy.

Module thread can get priority higer than txm_module_instance_maximum_priority
GHSA-w8rw-fqgj-9r49 published Oct 15, 2025 by mrybczyn

Moderate
A kernel object pointer validation flaw in ThreadX system calls allows attackers to supply pointers to reserved memory regions.
GHSA-wcfg-5jpf-hhxq published Oct 14, 2025 by mrybczyn

Moderate
Improper Parameter Check in ThreadX Syscall Implementation
GHSA-76hh-wrj5-hr2v published Oct 15, 2025 by mrybczyn

High
Missing array size check in _Mtxinit() in the Xtensa port
GHSA-vmp6-qhp9-r66x published Mar 26, 2024 by mrybczyn

High
Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()
GHSA-v9jj-7qjg-h6g6 published Mar 26, 2024 by mrybczyn

High
Azure RTOS ThreadX Remote Code Execution Vulnerability
GHSA-p7w6-62rq-vrf9 published Dec 3, 2023 by rkolandaivel

High

Learn more about advisories related to eclipse-threadx/threadx in the GitHub Advisory Database