CVE-2026-114408

The record

In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on the network can fill the destination table with Packet Too Big messages quoting new destinations, after which the next message makes the IP helper thread dereference a NULL pointer, crashing it on targets that fault on address 0 and stopping all network processing.

Affected packages

Related vulnerabilities

• CVE-2026-115403 In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket… CWE-252
• CVE-2026-118263 Echo is a Go web framework. CWE-252
• CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli… CWE-252
• CVE-2026-110353 HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of… CWE-252
• CVE-2026-56388 The Redis server command parser in Apache bRPC accepts an empty RESP array as a command… CWE-252
• CVE-2026-106436 The BSON encoder in the MongoDB PHP Driver does not check some return values after a… CWE-252
• CVE-2026-98141 In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate… CWE-252
• CVE-2026-98114 In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL… CWE-252