Back to overview

CVE-2026-11576

HIGH
7.5
CVSS 3.1
Description
The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path unconditionally calls fx_file_close() even when the file was never successfully opened. Multiple error branches jump to the shared cleanup label before any file open operation has occurred, causing fx_file_close() to operate on an uninitialized file handle, leading to undefined behavior, double-close issues, or memory corruption.

Metadata

CVE ID
CVE-2026-11576
State
PUBLISHED
Assigner
eclipse
Reserved
2026-06-08 11:16 UTC
Published
2026-06-19 08:27 UTC
Last updated
2026-06-19 08:27 UTC
Primary CWE
CWE-415
CWE-415 Double free
Vendor / Product
Eclipse Foundation / Eclipse ThreadX - NetX Duo
Sources
cve.org  ·  NVD

Severity & Metrics

7.5 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products (1)
VendorProductPlatformVersions
Eclipse Foundation Eclipse ThreadX - NetX Duo — 6.4.2 ≤ 6.5.0.202601
Weakness (CWE)
CWESourceDescription
CWE-415 cna CWE-415 Double free
CWE-459 cna CWE-459 Incomplete cleanup
CWE-908 cna CWE-908 Use of uninitialized resource
CVSS scores (1)
ScoreSeverityVersionSourceVector
7.5 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References (1)
Back to overview