EUVD Vulnerability Catalog

EUVD-2026-118540

Severity: MEDIUM Base Score: 6.7 CVSS Version: 3.1

Vulnerability Description

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples), affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channel, TOCTOU condition, or format-string misuse, potentially resulting in secure-world memory disclosure or denial of service. All software versions starting from 26.06.01-lts and 26.09.00 have fixed this issue.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

▪ Attack Vector (AV): Local

▪ Attack Complexity (AC): High

▪ Privileges Required (PR): None

▪ User Interaction (UI): None

▪ Scope (S): Unchanged

▪ Confidentiality Impact (C): High

▪ Integrity Impact (I): None

▪ Availability Impact (A): High

Affected Vendors & Systems

Vendor NXP

References & Advisory Links

https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

ENISA

EPSS Probability

Known Aliases

CVE-2026-118785 GHSA-fccx-r75p-cw55

Published On

2026-11-06

Last Updated

2026-11-06