CVE-2026-102714 | BDVDB-2026-380970 Detail

Description#

In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, built with IPv6, the ICMPv6 option validator accepts an option area that ends in a one- or two-byte residue, and the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect handlers then walk it without length checks. A host on the local link can send one such message to make the IP thread read past the packet or loop forever, and can place off-packet memory in the neighbor cache.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-09-29Record published in the CVE List.
2. Version 22026-11-04Most recent update recorded in the CVE List.