CVE catalog

CVE-2026-54467

On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.

[CVE catalog]

Severity
High · CVSS 7CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.17% · Oct 27, 2026

On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianarm-trusted-firmwaresid2.12.16+dfsg-1not affected
Debianarm-trusted-firmwareforky2.12.16+dfsg-1not affected
Debianarm-trusted-firmwaretrixie2.12.1+dfsg-1not affected
Debianarm-trusted-firmwarebookworm2.8.0+dfsg-1not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianarm-trusted-firmwaresourcesidNot affectedunimportantNot reportedNot reported
Debianarm-trusted-firmwaresourceforkyNot affectedunimportantNot reportedNot reported
Debianarm-trusted-firmwaresourcetrixieNot affectedunimportantNot reportedNot reported
Debianarm-trusted-firmwaresourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [arm-trusted-firmware]Not affected
    Details (1)

    • 2.8.0+dfsg-1 · arm64 · bookworm

      Not affected

      nvd · arm-trusted-firmware · debian · bookworm

  • [arm-trusted-firmware-tools]Not affected

    Source package: [arm-trusted-firmware]

    Details (2)

    • 2.8.0+dfsg-1 · amd64 · bookworm

      Not affected

      nvd · arm-trusted-firmware · debian · bookworm

    • 2.8.0+dfsg-1 · arm64 · bookworm

      Not affected

      nvd · arm-trusted-firmware · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)]