Improper handling of non‑secure‑world input in NXP MCUXpresso SDK TrustZone‑M example NSC veneer functions allows an attacker to supply unvalidated pointers or untrusted data, resulting in a timing side‑channel, TOCTOU condition, or format‑string misuse. The flaw can lead to disclosure of secure‑world memory or denial of service, as it permits reading or corrupting protected data without proper validation.

The vulnerability affects the NXP MCUXpresso SDK, specifically TrustZone‑M examples through 26.06.00‑lts and 26.09.00‑pvw2. All software versions beginning with 26.06.01‑lts and 26.09.00 are fixed.

The CVSS score is 6.7, indicating moderate severity. EPSS information is unavailable and the vulnerability is not listed in CISA KEV. The main attack vector is a non‑secure world caller that can trigger the vulnerable NSC veneer functions, presumably locally on the device. An attacker with such access could read secure memory or cause a denial of service by exploiting the unchecked pointers or format‑string vulnerability.