{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-118786","assignerOrgId":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","state":"PUBLISHED","assignerShortName":"ENISA","dateReserved":"2026-10-28T19:53:57.994Z","datePublished":"2026-11-06T22:43:43.895Z","dateUpdated":"2026-11-06T22:43:43.895Z"},"containers":{"cna":{"providerMetadata":{"orgId":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","shortName":"ENISA","dateUpdated":"2026-11-06T22:43:43.895Z"},"title":"NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-20","description":"CWE-20 Improper input validation","type":"CWE"}]}],"affected":[{"vendor":"NXP","product":"MCUXpresso SDK","modules":["multicore_examples/rpmsg_lite_pingpong_tzm/veneer_table.c"],"versions":[{"status":"affected","version":"0","lessThan":"26.12.00-pvw1","versionType":"semver"},{"status":"affected","version":"0","lessThan":"26.06.01-lts","versionType":"semver"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"Improper input validation in non-secure-callable (NSC)\nveneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example\n(multicore_examples/rpmsg_lite_pingpong_tzm) up to releases 26.06.00-lts and\n26.09.00 may allow a non-secure caller to supply unvalidated pointers and size\nvalues, potentially resulting in disclosure of secure-world memory to the\nnon-secure domain, or denial of service. All software versions starting from\n26.06.01-lts and 26.12.00-pvw1 have fixed this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Improper input validation in non-secure-callable (NSC)\nveneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example\n(multicore_examples/rpmsg_lite_pingpong_tzm) up to releases 26.06.00-lts and\n26.09.00 may allow a non-secure caller to supply unvalidated pointers and size\nvalues, potentially resulting in disclosure of secure-world memory to the\nnon-secure domain, or denial of service. All software versions starting from\n26.06.01-lts and 26.12.00-pvw1 have fixed this issue.</p>"}]}],"references":[{"url":"https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":6.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"}}],"credits":[{"lang":"en","value":"Tijs Bellefroid, Antonis Louka, Marton Bognar, Jo Van Bulck (DistriNet, KU Leuven)","type":"finder"}],"x_generator":{"engine":"Vulnogram 1.0.5"}}}}