Vulnerability record/PUBLISHED/Published Nov 6, 2026 22:35:32 UTC
CVE-2026-118785
Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples), affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channel, TOCTOU condition, or format-string misuse, potentially resulting in secure-world memory disclosure or denial of service. All software versions starting from 26.06.01-lts and 26.09.00 have fixed this issue.
Base score6.7/ 10
SeverityMediumCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorLocalAV
Attack complexityHighAC
Privileges requiredNonePR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactHighC
Integrity impactNoneI
Availability impactHighA
CVSS vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:HCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityENISA
Last updatedNov 6, 2026 22:35:32 UTC
PublishedNov 6, 2026 22:35:32 UTC
ReservedOct 28, 2026 19:53:57 UTC
Credits
- Tijs Bellefroid, Antonis Louka, Marton Bognar, Jo Van Bulck (DistriNet, KU Leuven)