HIGH 7.0 NVD
CVE-2026-54467
On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplie
On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.
References
- https://review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/53051/1/docs/security/secur
- https://www.trustedfirmware.org/projects/tf-m/
This high severity vulnerability with a CVSS score of 7.0 was published on 2026-08-26 via NVD.
vulnfeed aggregates 11364 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.