{"schema_version":1,"title":"Eclipse ThreadX GUIX vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Eclipse ThreadX GUIX: 0 in the last 7 days and 8 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91057, was published on 20 October 2026. 8 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/guix","json_url":"https://junglewise.ai/threats/technologies/guix.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/guix","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":8,"last_90_days":8,"last_365_days":8},"latest":[{"cve":"CVE-2026-91057","slug":"cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the","title":"Eclipse ThreadX GUIX multi-line text view out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:16.26+00:00","url":"https://junglewise.ai/threats/cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the"},{"cve":"CVE-2026-92454","cvss":6.1,"slug":"cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment","title":"GUIX JPEG decoder buffer over-read and infinite loop","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:36.757+00:00","url":"https://junglewise.ai/threats/cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment"},{"cve":"CVE-2026-92449","slug":"cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme","title":"Eclipse ThreadX GUIX binary resource heap buffer overflow","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.617+00:00","url":"https://junglewise.ai/threats/cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme"},{"cve":"CVE-2026-92446","slug":"cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as","title":"Eclipse ThreadX GUIX binary resource loader out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.477+00:00","url":"https://junglewise.ai/threats/cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as"},{"cve":"CVE-2026-91189","slug":"cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s","title":"Eclipse ThreadX GUIX binary resource loader integer underflow in font parsing","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.167+00:00","url":"https://junglewise.ai/threats/cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s"},{"cve":"CVE-2026-91186","slug":"cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records","title":"Eclipse ThreadX GUIX PNG decoder heap overflow on duplicate IHDR","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.023+00:00","url":"https://junglewise.ai/threats/cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records"},{"cve":"CVE-2026-91059","slug":"cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg","title":"GUIX JPEG decoder out-of-bounds read via malformed marker ordering","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:35.873+00:00","url":"https://junglewise.ai/threats/cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg"},{"cve":"CVE-2026-103414","epss":0.0016,"slug":"cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and","title":"Eclipse ThreadX GUIX binary resource loader heap overflow","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.637+00:00","url":"https://junglewise.ai/threats/cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Eclipse ThreadX NetX Duo","slug":"eclipse-threadx-netx-duo","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo"},{"name":"Eclipse ThreadX NetX Secure","slug":"eclipse-threadx-netx-secure","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-secure"}],"technology":{"hub":true,"name":"Eclipse ThreadX GUIX","slug":"guix","vendor":{"hub":true,"name":"Eclipse ThreadX","slug":"eclipse-threadx","url":"https://junglewise.ai/threats/vendors/eclipse-threadx"},"aliases":[],"category":"library","url":"https://junglewise.ai/threats/technologies/guix"},"most_severe":[{"cve":"CVE-2026-92454","cvss":6.1,"slug":"cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment","title":"GUIX JPEG decoder buffer over-read and infinite loop","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:36.757+00:00","url":"https://junglewise.ai/threats/cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment"},{"cve":"CVE-2026-103414","epss":0.0016,"slug":"cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and","title":"Eclipse ThreadX GUIX binary resource loader heap overflow","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.637+00:00","url":"https://junglewise.ai/threats/cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and"},{"cve":"CVE-2026-91057","slug":"cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the","title":"Eclipse ThreadX GUIX multi-line text view out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:16.26+00:00","url":"https://junglewise.ai/threats/cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the"},{"cve":"CVE-2026-92449","slug":"cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme","title":"Eclipse ThreadX GUIX binary resource heap buffer overflow","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.617+00:00","url":"https://junglewise.ai/threats/cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme"},{"cve":"CVE-2026-92446","slug":"cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as","title":"Eclipse ThreadX GUIX binary resource loader out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.477+00:00","url":"https://junglewise.ai/threats/cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as"},{"cve":"CVE-2026-91189","slug":"cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s","title":"Eclipse ThreadX GUIX binary resource loader integer underflow in font parsing","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.167+00:00","url":"https://junglewise.ai/threats/cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s"},{"cve":"CVE-2026-91186","slug":"cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records","title":"Eclipse ThreadX GUIX PNG decoder heap overflow on duplicate IHDR","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.023+00:00","url":"https://junglewise.ai/threats/cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records"},{"cve":"CVE-2026-91059","slug":"cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg","title":"GUIX JPEG decoder out-of-bounds read via malformed marker ordering","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:35.873+00:00","url":"https://junglewise.ai/threats/cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}