7 matches found
EUVD-2026-89172
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...
CVE-2026-102709
An improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware fails to verify these pointers before dereferencing them, leading to unintended...
CVE-2026-102709
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread pointer supplied by the non-secure world without checking that it points to non-secure memory. Non-secure code can make the secure firmware...
CVE-2026-102709
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread pointer supplied by the non-secure world without checking that it points to non-secure memory. Non-secure code can make the secure firmware...
CVE-2026-102709
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread pointer supplied by the non-secure world without checking that it points to non-secure memory. Non-secure code can make the secure firmware...
PT-2026-102757
Name of the Vulnerable Software and Affected Versions Arm TrustZone-M affected versions not specified Description Improper validation of non-secure NS pointers in multiple non-secure callable NSC entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The...
CVE-2026-102709: Exposure of Sensitive Information to an Unauthorized Actor
Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...