{"affected":[{"defaultStatus":"unaffected","product":"MCUXpresso SDK","source":"CNA: ENISA","vendor":"NXP","versions":[{"lessThan":"26.09.00","status":"affected","version":"0","versionType":"semver"},{"lessThan":"26.06.01-lts","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118785","cwes":["CWE-20"],"description":"Improper handling of non-secure-world input in NSC veneer\nfunctions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples),\naffecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a\nnon-secure caller to supply unvalidated pointers or untrusted data, causing a\ntiming side-channel, TOCTOU condition, or format-string misuse, potentially\nresulting in secure-world memory disclosure or denial of service. All software\nversions starting from 26.06.01-lts and 26.09.00 have fixed this issue.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.7,"severity":"medium","source":"CNA: ENISA","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},{"score":6.7,"severity":"medium","source":"NVD: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","version":"3.1"}],"modifiedAt":1794007040840,"publishedAt":1794004532226,"references":[{"source":"CNA: ENISA","tags":["vendor-advisory"],"url":"https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html"},{"source":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","tags":[],"url":"https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html"}],"remediation":[],"revision":"30364b2c88b8542e45fc0243f9e437e465f0352f74770d60048a8ff83f2f8d0c","sources":[{"modifiedAt":1794004532226,"name":"CNA: ENISA","retrievedAt":1794006511484,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118785"},{"modifiedAt":1794007040840,"name":"NVD","retrievedAt":1794011277615,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118785"}],"ssvc":null,"status":"published","title":"NXP MCUXpresso SDK TrustZone-M Examples before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions","updatedAt":1794011277615}