NXP MCUXpresso SDK up to 26.06.00-lts/26.09.00-pvw2 NSC Veneer Functions input validation

Summaryinfo

A vulnerability, which was classified as very critical, has been found in NXP MCUXpresso SDK up to 26.06.00-lts/26.09.00-pvw2. Affected is an unknown function of the component NSC Veneer Functions. The manipulation leads to input validation. This vulnerability is uniquely identified as CVE-2026-118785. Local access is required to approach this attack. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in NXP MCUXpresso SDK up to 26.06.00-lts/26.09.00-pvw2 and classified as very critical. This issue affects an unknown functionality of the component NSC Veneer Functions. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples), affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channel, TOCTOU condition, or format-string misuse, potentially resulting in secure-world memory disclosure or denial of service. All software versions starting from 26.06.01-lts and 26.09.00 have fixed this issue.

It is possible to read the advisory at mcuxpresso.nxp.com. The identification of this vulnerability is CVE-2026-118785 since 10/28/2026. The exploitation is known to be easy. Attacking locally is a requirement. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 11/06/2026).

Upgrading to version 26.06.01-lts or 26.09.00 eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• NXP

Name

• MCUXpresso SDK

Version

• 26.06.00-lts
• 26.09.00-pvw2

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion