Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Nordic Semiconductor ASA Clear all filters
TI-2026-15396 CVE-2026-18796 · GHSA-q9vx-6fw9-4mv8

QSPI flash encryption side-channel leakage

Priority LOW 31

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code.

CVSS 4.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00104 Published 2026-09-07 No fix listed CWE-1342
TI-2026-12094 CVE-2026-14297 · GHSA-9789-mpm3-jqwq

Out-of-bounds write in Nordic Semiconductor ASA nRF Connect SDK

Priority LOW 39

A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memo…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0024 Published 2026-09-07 No fix listed CWE-787