{"affected":[{"defaultStatus":"unaffected","product":"MCUXpresso SDK","source":"CNA: ENISA","vendor":"NXP","versions":[{"lessThan":"26.12.00-pvw1","status":"affected","version":"0","versionType":"semver"},{"lessThan":"26.06.01-lts","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118786","cwes":["CWE-20"],"description":"Improper input validation in non-secure-callable (NSC)\nveneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example\n(multicore_examples/rpmsg_lite_pingpong_tzm) up to releases 26.06.00-lts and\n26.09.00 may allow a non-secure caller to supply unvalidated pointers and size\nvalues, potentially resulting in disclosure of secure-world memory to the\nnon-secure domain, or denial of service. All software versions starting from\n26.06.01-lts and 26.12.00-pvw1 have fixed this issue.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.8,"severity":"medium","source":"CNA: ENISA","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","version":"3.1"},{"score":6.8,"severity":"medium","source":"NVD: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","version":"3.1"}],"modifiedAt":1794007040970,"publishedAt":1794005023895,"references":[{"source":"CNA: ENISA","tags":["vendor-advisory"],"url":"https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html"},{"source":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","tags":[],"url":"https://mcuxpresso.nxp.com/mcuxsdk/26.12.00-pvw1/release/index.html"}],"remediation":[],"revision":"df708f5c832d619ccdc27bac285c0ce1fe0fb78000b89e4ed947c4c571f64567","sources":[{"modifiedAt":1794005023895,"name":"CNA: ENISA","retrievedAt":1794006513853,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118786"},{"modifiedAt":1794007040970,"name":"NVD","retrievedAt":1794011277949,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118786"}],"ssvc":null,"status":"published","title":"NXP MCUXpresso SDK rpmsg-lite TZM Example before 26.06.01-lts Secure Memory Disclosure via NSC Veneer Functions","updatedAt":1794011277949}