CVE-2026-102005

Published: Sep 28, 2026Modified: Sep 29, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: 0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8 (Secondary)

Description

Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, non-default configuration states when processing specific service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (1)

https://support2.windriver.com/index.php?page=cve

Source: 0bf9931a-6ebf-4f48-bd14-39ee5e1d61f8

Timeline

No history available yet.