CVE-2026-18796
2026-09-07
09h17 +00:00
09h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
CVE の説明
Any application that
uses external QSPI flash for encrypted XIP on nRF5340 and relies on that
encryption for confidentiality and/or integrity of the externally stored
code. No specific nRF Connect SDK version is the root cause; the weakness
is in the on-the-fly decryption scheme.
CVE の情報
関連する弱点
| 弱点名 | 出典 | |
|---|---|---|
| Information Exposure through Microarchitectural State after Transient Execution The processor does not properly clear microarchitectural state after incorrect microcode assists or speculative execution, resulting in transient execution. |
