Threats tagged 'ghsa-fccx-r75p-cw55'

A vulnerability in the NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples allows improper handling of non-secure-world input. This flaw affects versions through 26.06.00-lts and 26.09.00-pvw2 and may enable a non-secure caller to supply unvalidated pointers or untrusted data. The issue can lead to timing side-channel attacks, TOCTOU conditions, or format-string misuse, potentially causing secure-world memory disclosure or denial of service. Versions starting from 26.06.01-lts and 26.09.00 have addressed this vulnerability.