CVE-2026-102004
HighCVSS 7.8Summary
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09.
Risk Assessment
The risk includes potential memory corruption, which could lead to system crashes or potential code execution. Embedded systems using VxWorks may be exposed to attacks.
Recommendation
Update VxWorks to version 26.09 or later to remediate the vulnerability.
Other vulnerabilities in Wind River VxWorks
See all- CVE-2026-102006Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09.
- CVE-2026-102005Medium
In Wind River VxWorks 7 versions 24.03 through 26.03, a memory leak occurs under specific non-default configurations when processing certain service routines, causing the system to terminate operations before releasing allocated memory pools. Fixed in VxWorks 7 26.09.
- CVE-2026-97686Medium
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and file descriptors before terminating the calling application. Fixed in Version 26.09.
Original NVD description (English source)
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem. Fixed in Version 26.09
Vulnerability data from NVD (NIST) · CISA KEV · EPSS