CVE-2026-114408 : 상세 정보

CVE-2026-114408

2026-11-02
16h17 +00:00
Memory Corruption
2026-11-04
14h17 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on the network can fill the destination table with Packet Too Big messages quoting new destinations, after which the next message makes the IP helper thread dereference a NULL pointer, crashing it on targets that fault on address 0 and stopping all network processing.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-252 Unchecked Return Value
The product does not check the return value from a method or function.
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

참고 자료