CVE-2026-118786

Improper input validation in non-secure-callable NSC veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example multicoreexamples/rpmsglitepingpongtzm up to releases 26.06.00-lts and 26.09.00 may allow a non-secure caller to supply unvalidated pointers and size values, potentially...

CVE-2026-102709

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread pointer supplied by the non-secure world without checking that it points to non-secure memory. Non-secure code can make the secure firmware...

CVE-2026-102709: Exposure of Sensitive Information to an Unauthorized Actor

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...