Executive brief
Trusted Firmware-M (TF-M) is a security platform that protects embedded processors by implementing a secure processing environment for microcontrollers. A flaw in mailbox initialization allows non-secure software to supply an unvalidated pointer, potentially allowing an attacker with code execution in the non-secure world to access or manipulate secure memory regions.
Technical details
The vulnerability is an input validation flaw in the mailbox initialization code affecting PSOC64 and RP2350 platforms in TF-M versions 2.0 through 2.3.0. The mailbox accepts a non-secure, unvalidated pointer supplied by non-secure software during initialization. This allows an attacker capable of executing code in the non-secure execution environment to potentially read or write secure memory by providing a malicious pointer value. The issue was fixed in commit 00d1b3e. The vulnerability requires prior code execution in the non-secure domain and affects dual-core platforms where non-secure and secure execution environments are isolated.
Affected products
- TrustedFirmware Trusted Firmware-M 2.0 through 2.3.0
Timeline
- 2026-08-26: disclosed