We detect you are using an unsupported browser. For the best experience, please visit the site using Chrome, Firefox, Safari, or Edge. X
Maximize Your Experience: Reap the Personalized Advantages by Completing Your Profile to Its Fullest. Update Here
Stay in the loop with the latest from Microchip. Update your profile while you are at it. Update Here
Complete your profile to access more resources. Update Here

PSIRT-151: SAMA5D44 Fault Injection Vulnerability

Vulnerability Details


Date of Disclosure: 07/06/2026

Affected Product:  SAMA5D4

  • Vulnerability Type: CWE-1247: Improper Protection Against Voltage and Clock Glitches
  • CVE Identifier: CVE-2026-18349
  • CVSS Score: 7.3
  • Vulnerability Description:
    • By injecting voltage glitches on the VCC_CORE output pin, it is possible to circumvent protections in place in software during the boot process

Risk Assessment


Exploitation of the vulnerability could allow an attacker to gain full access to execute external code.

Mitigation


Add circuitry to guard the VCC_CORE pin from voltage transients

Acknowledgements


Reported by Vladimir Kononovich

Live Chat

Need Help?

Privacy Policy