The Microchip SAMA5D4 microcontroller is affected by a vulnerability (CVE-2026-18349) classified under CWE-1247, which involves improper protection against voltage and clock glitches. This weakness enables hardware fault injection, potentially allowing attackers to disrupt normal operation or bypass security mechanisms. The CVSS 4.0 vector indicates the attack requires physical presence (AV:P), has high complexity (AC:H), and no user interaction (UI:N). The vulnerability impacts confidentiality, integrity, availability, and security controls with high requirements (VC:H, VI:H, VA:H, SC:H, SI:H, SA:H). No vendor advisory or patch information is currently available.

The vulnerability allows an attacker with physical access to perform hardware fault injection via voltage and clock glitches on the SAMA5D4 microcontroller. This could lead to disruption of device operation or compromise of security functions. The high CVSS score reflects the potential severity if exploited, but the attack complexity and requirement for physical access limit remote exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, mitigation may require physical security controls to prevent unauthorized access to the hardware and monitoring for abnormal device behavior. No official or temporary fixes have been disclosed by Microchip.