{"id":"CVE-2026-118785","kind":"vulnerability","aliases":["CVE-2026-118785"],"related":[],"title":"NXP MCUXpresso SDK: TrustZone examples let untrusted callers read secure memory","description":"Improper handling of non-secure-world input in NSC veneer\nfunctions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples),\naffecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a\nnon-secure caller to supply unvalidated pointers or untrusted data, causing a\ntiming side-channel, TOCTOU condition, or format-string misuse, potentially\nresulting in secure-world memory disclosure or denial of service. All software\nversions starting from 26.06.01-lts and 26.09.00 have fixed this issue.","summary":"Example code in NXP's MCUXpresso SDK TrustZone-M samples does not validate pointers and data passed from the non-secure world into secure veneer functions. A non-secure caller can cause secure-world memory disclosure or a denial of service.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","mcuxpresso-sdk","nxp","trustzone-m","vendor"],"not_affected_if":["not-using-trustzone-examples"],"how_to_check":"- Check whether the project builds from the `trustzone_examples` folder of the MCUXpresso SDK.\n- Check the SDK version in use; affected versions run through `26.06.00-lts` and `26.09.00-pvw2`.","fix":"- MCUXpresso SDK `26.06.01-lts` or later in the 26.06 line.\n- MCUXpresso SDK `26.09.00` or later.","status":"open","published_at":"2026-11-06T23:17:20+00:00","first_seen_at":"2026-11-06T23:44:35+00:00","triaged_at":"2026-11-06T23:45:08+00:00","updated_at":"2026-11-06T23:45:08+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-06T23:45:08Z","model":"claude-haiku-5-5","output":{"fix":"- MCUXpresso SDK `26.06.01-lts` or later in the 26.06 line.\n- MCUXpresso SDK `26.09.00` or later.","reach":"local","title":"NXP MCUXpresso SDK: TrustZone examples let untrusted callers read secure memory","impact":"medium","summary":"Example code in NXP's MCUXpresso SDK TrustZone-M samples does not validate pointers and data passed from the non-secure world into secure veneer functions. A non-secure caller can cause secure-world memory disclosure or a denial of service.","audience":"developers","category":"vendor","nicknames":[],"who_cares":["nxp","mcuxpresso-sdk","trustzone-m","embedded"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"non-secure caller reads secure-world memory or crashes the device","analyst_note":"","how_to_check":"- Check whether the project builds from the `trustzone_examples` folder of the MCUXpresso SDK.\n- Check the SDK version in use; affected versions run through `26.06.00-lts` and `26.09.00-pvw2`.","plain_action":"","needs_analyst":false,"not_affected_if":["not-using-trustzone-examples"],"who_is_affected":"Only projects that copied or built the TrustZone-M example code from the NXP MCUXpresso SDK are exposed, because the flaw is in the example's secure-world entry functions. Production firmware written from scratch, or projects that do not use these examples, can skip it. The sources do not say whether the example code is commonly reused in shipped products.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.00073,"input_tokens":4332,"output_tokens":594,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-118785':14A,17A '-2026':13A,16A '26.06.00':97C '26.06.01':146C '26.09.00':100C,149C 'affect':94C 'allow':103C 'caller':8A,59B,108C 'caus':61B,116C 'channel':121C 'code':28B 'condit':123C 'cve':12A,15A 'data':43B,115C 'denial':69B,138C 'disclosur':66B,136C 'embed':18B 'exampl':5A,27B,91C,93C 'fix':151C 'format':126C 'format-str':125C 'function':54B,83C 'handl':73C 'improp':72C 'input':79C 'issu':153C 'let':6A 'lts':98C,147C 'm':25B,36B,90C 'may':102C 'mcuxpresso':2A,20B,32B,86C 'mcuxpresso-sdk':19B 'memori':11A,65B,135C 'misus':128C 'non':48B,57B,76C,106C 'non-secur':47B,56B,105C 'non-secure-world':75C 'nsc':81C 'nxp':1A,22B,30B,85C 'pass':44B 'pointer':41B,112C 'potenti':129C 'pvw2':101C 'read':9A 'result':130C 'sampl':37B 'sdk':3A,21B,33B,87C 'secur':10A,49B,52B,58B,63B,77C,107C,133C 'secure-world':62B,132C 'servic':71B,140C 'side':120C 'side-channel':119C 'softwar':142C 'start':144C 'string':127C 'suppli':110C 'time':118C 'toctou':122C 'trustzon':4A,24B,35B,89C,92C 'trustzone-m':23B,34B,88C 'untrust':7A,114C 'unvalid':111C 'valid':40B 'vendor':26B 'veneer':53B,82C 'version':95C,143C 'world':50B,64B,78C,134C","nicknames":[],"mitigations":[],"who_affected":"Only projects that copied or built the TrustZone-M example code from the NXP MCUXpresso SDK are exposed, because the flaw is in the example's secure-world entry functions. Production firmware written from scratch, or projects that do not use these examples, can skip it. The sources do not say whether the example code is commonly reused in shipped products.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["embedded","mcuxpressosdk","medium","nxp","trustzonem","vendor"],"campaign_type":null,"search_a":"'-118785':14A,17A '-2026':13A,16A 'caller':8A 'cve':12A,15A 'exampl':5A 'let':6A 'mcuxpresso':2A 'memori':11A 'nxp':1A 'read':9A 'sdk':3A 'secur':10A 'trustzon':4A 'untrust':7A","search_b":"'caller':59B 'caus':61B 'code':28B 'data':43B 'denial':69B 'disclosur':66B 'embed':18B 'exampl':27B 'function':54B 'm':25B,36B 'mcuxpresso':20B,32B 'mcuxpresso-sdk':19B 'memori':65B 'non':48B,57B 'non-secur':47B,56B 'nxp':22B,30B 'pass':44B 'pointer':41B 'sampl':37B 'sdk':21B,33B 'secur':49B,52B,58B,63B 'secure-world':62B 'servic':71B 'trustzon':24B,35B 'trustzone-m':23B,34B 'valid':40B 'vendor':26B 'veneer':53B 'world':50B,64B","search_c":"'26.06.00':97C '26.06.01':146C '26.09.00':100C,149C 'affect':94C 'allow':103C 'caller':108C 'caus':116C 'channel':121C 'condit':123C 'data':115C 'denial':138C 'disclosur':136C 'exampl':91C,93C 'fix':151C 'format':126C 'format-str':125C 'function':83C 'handl':73C 'improp':72C 'input':79C 'issu':153C 'lts':98C,147C 'm':90C 'may':102C 'mcuxpresso':86C 'memori':135C 'misus':128C 'non':76C,106C 'non-secur':105C 'non-secure-world':75C 'nsc':81C 'nxp':85C 'pointer':112C 'potenti':129C 'pvw2':101C 'result':130C 'sdk':87C 'secur':77C,107C,133C 'secure-world':132C 'servic':140C 'side':120C 'side-channel':119C 'softwar':142C 'start':144C 'string':127C 'suppli':110C 'time':118C 'toctou':122C 'trustzon':89C,92C 'trustzone-m':88C 'untrust':114C 'unvalid':111C 'veneer':82C 'version':95C,143C 'world':78C,134C","first_public_at":"2026-11-06T23:17:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H","cvss_by":"a6d3dc9e-0591-4a13-bce7-0f5b31ff6158","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118785","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118785","severity":null,"published_at":"2026-11-06T23:17:20+00:00","modified_at":"2026-11-06T23:17:20+00:00","first_seen_at":"2026-11-06T23:44:35+00:00","fetched_at":"2026-11-06T23:44:35+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}