Arm · Trustzone-M · CVE-2026-102709
**Name of the Vulnerable Software and Affected Versions**
Arm TrustZone-M (affected versions not specified)
**Description**
Improper validation of non-secure (NS) pointers in multiple non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware dereferences these pointers without verifying they reference non-secure memory, leading to the unintended disclosure of secure memory contents. This breach of isolation guarantees can be used as a memory disclosure or corruption primitive to potentially recover sensitive cryptographic material.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.