Improper Input Handling in NXP MCUXpresso SDK TrustZone-M Examples
CVE-2026-118785

6.7MEDIUM

Key Information:

Vendor

Nxp

Status
Mcuxpresso Sdk
Vendor
CVE Published:
6 November 2026

What is CVE-2026-118785?

The NXP MCUXpresso SDK TrustZone-M examples exhibit improper handling of non-secure-world input, specifically within the NSC veneer functions. This vulnerability can be exploited by a non-secure caller to provide unvalidated pointers or untrusted data, leading to potential timing side-channel attacks, TOCTOU (Time-of-Check to Time-of-Use) conditions, or misuse of format strings. These exploits may allow for secure-world memory disclosure or cause denial of service, posing a significant risk to applications relying on secure communication. Versions 26.06.01-lts and 26.09.00 and later have addressed this issue.

Affected Version(s)

MCUXpresso SDK 0 < 26.09.00

MCUXpresso SDK 0 < 26.06.01-lts

References

https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/...
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tijs Bellefroid, Antonis Louka, Marton Bognar, Jo Van Bulck (DistriNet, KU Leuven)
.