{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-118785","assignerOrgId":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","state":"PUBLISHED","assignerShortName":"ENISA","dateReserved":"2026-10-28T19:53:57.994Z","datePublished":"2026-11-06T22:35:32.226Z","dateUpdated":"2026-11-06T22:35:32.226Z"},"containers":{"cna":{"providerMetadata":{"orgId":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","shortName":"ENISA","dateUpdated":"2026-11-06T22:35:32.226Z"},"title":"NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-20","description":"CWE-20 Improper input validation","type":"CWE"}]}],"affected":[{"vendor":"NXP","product":"MCUXpresso SDK","modules":["trustzone_examples/hello_world_s/veneer_table.c"],"versions":[{"status":"affected","version":"0","lessThan":"26.09.00","versionType":"semver"},{"status":"affected","version":"0","lessThan":"26.06.01-lts","versionType":"semver"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"Improper handling of non-secure-world input in NSC veneer\nfunctions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples),\naffecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a\nnon-secure caller to supply unvalidated pointers or untrusted data, causing a\ntiming side-channel, TOCTOU condition, or format-string misuse, potentially\nresulting in secure-world memory disclosure or denial of service. All software\nversions starting from 26.06.01-lts and 26.09.00 have fixed this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Improper handling of non-secure-world input in NSC veneer\nfunctions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples),\naffecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a\nnon-secure caller to supply unvalidated pointers or untrusted data, causing a\ntiming side-channel, TOCTOU condition, or format-string misuse, potentially\nresulting in secure-world memory disclosure or denial of service. All software\nversions starting from 26.06.01-lts and 26.09.00 have fixed this issue.</p>\n\n\n\n\n\n<br>"}]}],"references":[{"url":"https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":6.7,"vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H"}}],"credits":[{"lang":"en","value":"Tijs Bellefroid, Antonis Louka, Marton Bognar, Jo Van Bulck (DistriNet, KU Leuven)","type":"finder"}],"x_generator":{"engine":"Vulnogram 1.0.5"}}}}