CVE-2026-102709
CVSS Score
0.0
EPSS Score
0.1%
EPSS Percentile
1th
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports dereference a thread pointer supplied by the non-secure world without checking that it points to non-secure memory. Non-secure code can make the secure firmware reveal which secure bytes are zero, write chosen secure words, and fault the secure world, breaking TrustZone-M isolation and enabling recovery of secure-world secrets such as cryptographic keys.
| CWE | CWE-200 CWE-501 CWE-822 |
| Vendor | eclipse foundation |
| Product | eclipse threadx |
| Published | Sep 29, 2026 |
| Last Updated | Nov 3, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse threadx
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse ThreadX
6.0.1 ≤ 6.5.2.202603
References
Credits
🔍 Jo Van Bulck 🔍 Tijs Bellefroid 🔍 Marton Bognar 🔍 Antonis Louka Frédéric Desbiens