CVE-2026-114408:詳細資料

CVE-2026-114408

2026-11-02
16h17 +00:00
Memory Corruption
2026-11-10
15h17 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on the network can fill the destination table with Packet Too Big messages quoting new destinations, after which the next message makes the IP helper thread dereference a NULL pointer, crashing it on targets that fault on address 0 and stopping all network processing.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-252 Unchecked Return Value
The product does not check the return value from a method or function.
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.

參考資料