Skip to content
OpenAdvisories
High · 8.8 CVE-2026-94018 EUVD-2026-105132

NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path

Published Oct 20, 2026 · Updated Oct 20, 2026 · Assigned by eclipse

Description

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reachable by an unauthenticated remote client with a single malformed request.

Affected products

VendorProductAffectedFixed
Eclipse Foundation Eclipse ThreadX - NetX Duo 6.4.2 – ≤ 6.5.1.202602 6.5.2.202603

References