Unrated severityNVD Advisory· Published Aug 26, 2026· Updated Aug 26, 2026

CVE-2026-54467

Description

On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Trustedfirmware M/Trusted Firmware Mllm-fuzzy
Range: <=2.3.0

Patches

Vulnerability mechanics

References

review.trustedfirmware.org/c/TF-M/trusted-firmware-m/+/53051/1/docs/security/security_advisories/missing_ns_pointer_validation_mailbox_init.rstmitre
www.trustedfirmware.org/projects/tf-m/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000