Threats tagged 'ghsa-6855-6r26-x36x'

A vulnerability in the NXP MCUXpresso SDK rpmsg-lite multicore example (multicore_examples/rpmsg_lite_pingpong_tzm) up to versions 26.06.00-lts and 26.09.00 allows improper input validation in non-secure-callable veneer functions. This flaw permits a non-secure caller to supply unvalidated pointers and size values, which may lead to disclosure of secure-world memory or denial of service. The issue is fixed in versions starting from 26.06.01-lts and 26.12.00-pvw1.