CVE-2026-54467

The vulnerability affects the Trusted Firmware-M (TF-M) platform versions 2.0.0 to 2.3.0, where improper mailbox initialization on PSOC64 and RP2350 allows for the acceptance of a non-secure, unvalidated pointer. This flaw could lead to unauthorized access or manipulation of memory, potentially compromising the integrity and confidentiality of the system. Organizations utilizing TF-M on the specified hardware should prioritize patching this vulnerability to mitigate the associated risks.