Memory Access Vulnerability in Cortex-A7 MMU Modules by Vendor Eclipse

CVE-2026-95109

What is CVE-2026-95109?

The Cortex-A7 MMU Modules exhibit a significant flaw in their buffer validation process, where only the first byte of a caller-supplied buffer is checked. This inadequate validation allows a memory-protected module to exploit ranges based on the user-readable first byte, bypassing the intended security checks. As a result, privileged dispatch code can inadvertently read or write beyond expected limits. This vulnerability affects any service that utilizes this macro for buffer processing, making it a systemic issue rather than isolated to specific functions.

References