CVE-2026-103416

Name of the Vulnerable Software and Affected Versions Eclipse ThreadX NetX Duo version 6.5.1.202602

Description An out-of-bounds write exists in the TLS 1.3 handshake message cache. This occurs when a handshake message exceeds the cache size, allowing data to be written beyond the buffer and into the session control block, which contains pointers. A malicious or compromised server can trigger this condition in a TLS 1.3 client before certificate authentication is completed, meaning no server certificate is required to exploit the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.