Fdesbiens

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds pointers. A malicious or compromised server can make a TLS 1.3 client produce such a message before certificate authentication completes, so no server certificate is needed to reach it.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** An ABI (Application Binary Interface) mismatch in the MQTT WebSocket setter may lead to memory disclosure or cause the system to crash. An ABI is a set of rules that allows different programs to communicate with each other at a binary level. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** The `gx binres theme load()` function incorrectly sizes its theme buffer for the requested theme and performs allocation even if the resource contains no theme with that specific ID. When a theme ID is provided that is at or beyond the theme count declared by the resource, a buffer of zero bytes is allocated. Subsequently, the load process reads beyond the end of the theme table, interprets the following data as a theme header, and writes a `GX THEME` and its associated tables into the zero-byte buffer. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.