CVE-2026-102709

Name of the Vulnerable Software and Affected Versions Arm TrustZone-M (affected versions not specified)

Description Improper validation of non-secure (NS) pointers in multiple non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware dereferences these pointers without verifying they reference non-secure memory, leading to the unintended disclosure of secure memory contents. This breach of isolation guarantees can be used as a memory disclosure or corruption primitive to potentially recover sensitive cryptographic material.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.