An out-of-bounds read occurs in the GUIX rendering routine _gx_multi_line_text_view_display_info_get, where the function reads one byte past the end of the provided text buffer when the string ends with a carriage return. This flaw can expose unintended memory contents and, through a secondary over-read in _gx_multi_line_text_view_string_total_rows_compute, cause a row of text to be displayed that is not present in the source. The primary consequence is information disclosure or a possible application crash; the vulnerability does not enable arbitrary code execution.

The affected vendor is Eclipse ThreadX and the product is GUIX. No specific product versions are listed, implying that any GUIX release containing the vulnerable _gx_multi_line_text_view code path is at risk. Users should consult the Eclipse ThreadX release notes or the issue tracker linked in the advisory for confirmation of affected builds.

The CVSS base score of 4.6 indicates moderate severity. The EPSS score is not available, so the likelihood of exploitation is unknown, and the flaw is not listed in CISA KEV. The likely attack vector is a local process or user‑supplied input that can provide a string terminated with a carriage return, an inference drawn from the description. While no active exploits are reported, the potential for data exposure warrants monitoring and, when feasible, applying a vendor patch.