← Database

CVE-2026-54467

HIGH CVSS: 7.0 Published: 2026-08-26 Modified: 2026-08-26

Description

On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.

Affected Platforms

Unknown

Weakness Type

CWE-283

References