CVE-2026-118785

MediumCVSS 6.7/10Last modified Nov 12, 2026

Description

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples), affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channel, TOCTOU condition, or format-string misuse, potentially resulting in secure-world memory disclosure or denial of service. All software versions starting from 26.06.01-lts and 26.09.00 have fixed this issue.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
NXPMCUXpresso SDK< 26.09.00; < 26.06.01-lts

References

Timeline

Published
Nov 6, 2026
Last modified
Nov 12, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1187866.8Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore example (multicore_exCVE-2026-118798.5MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading malicious DLLs from a teCVE-2026-1187907.2Multiple hardcoded credentials are embedded within product components and administrative functionalities. These credentials may enable unautCVE-2026-1187917.2The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages toCVE-2026-1187926.1Default credentials permit access through AcuXDBC.CVE-2026-1187955.9Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with daCVE-2026-1187984.4Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, areCVE-2026-11889.8In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor featurCVE-2026-118803.1The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, alCVE-2026-1188006.4The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable tCVE-2026-1188014.3The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable tCVE-2026-1188037.5Bricks Theme 2.4.3 and before contains an unauthenticated dynamic-data tag injection vulnerability that allows anonymous attackers to contro
CVE-2026-118785: Medium severity, CVSS 6.7 | Vulnix