CVE-2026-91057 — Out-of-bounds read when a multi-line text view string ends with a carriage return

CVE-2026-91057

Out-of-bounds read when a multi-line text view string ends with a carriage return PUBLISHED

Description (CNA)

`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return (`\r`). The over-read can also cause callers to advance their index past the end of the string, producing a second over-read in `_gx_multi_line_text_view_string_total_rows_compute()` and a row of text that is not in the source.

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse ThreadX - GUIX	affected 0 through 6.5.1.202602a; unaffected 6.5.2.202603

CWE

CWE-125

References

https://github.com/eclipse-threadx/guix/security/advisories/GHSA-4qjc-2g93-36m2

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.