Threats tagged 'ghsa-75rq-fmfg-xmgx'

CVE-2026-102709 is a high-severity vulnerability in Eclipse Foundation's ThreadX affecting versions up to 6.5.1.202602. It involves improper validation of non-secure pointers in TrustZone-M non-secure callable entry functions, allowing an attacker in the non-secure world to cause the secure firmware to disclose secure memory contents. This breaks the isolation guarantees of Arm TrustZone-M and could lead to exposure of sensitive cryptographic material.