CVE-2026-18349

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18349", "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "state": "PUBLISHED", "assignerShortName": "Microchip", "dateReserved": "2026-07-30T05:06:19.951Z", "datePublished": "2026-08-24T16:07:45.500Z", "dateUpdated": "2026-10-27T16:40:02.564Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "shortName": "Microchip", "dateUpdated": "2026-10-27T16:40:02.564Z"}, "title": "SAMA5D44 Fault Injection Vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1247", "description": "CWE-1247 Improper protection against voltage and clock glitches", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-624", "descriptions": [{"lang": "en", "value": "CAPEC-624 Hardware Fault Injection"}]}], "affected": [{"vendor": "Microchip", "product": "SAMA5D4", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection.\n\nThis issue affects SAMA5D4.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection.<p>This issue affects SAMA5D4.</p>"}]}], "references": [{"url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/sama5d44-fault-injection-vulnerability"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "PHYSICAL", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.3, "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}}], "configurations": [{"lang": "en", "value": "Access to the VCC_CORE pin.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Access to the VCC_CORE pin."}]}], "solutions": [{"lang": "en", "value": "Because this attack requires direct physical access to the device\u2019s core power supply, the most effective protection is to prevent such access. Customers deploying the SAMA5D4 in security-sensitive applications should review the physical-security assumptions of their deployment and consider measures that make the core supply rail physically inaccessible.\u00a0 This includes avoiding exposed test points or headers on that rail and employing mechanical protections such as potting, conformal coating, shielding, or tamper-resistant enclosures to prevent attachment of fault-injection equipment.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Because this attack requires direct physical access to the device\u2019s core power supply, the most effective protection is to prevent such access. Customers deploying the SAMA5D4 in security-sensitive applications should review the physical-security assumptions of their deployment and consider measures that make the core supply rail physically inaccessible.&nbsp; This includes avoiding exposed test points or headers on that rail and employing mechanical protections such as potting, conformal coating, shielding, or tamper-resistant enclosures to prevent attachment of fault-injection equipment."}]}], "timeline": [{"time": "2026-07-06T07:00:00.000Z", "lang": "en", "value": "Reported"}], "credits": [{"lang": "en", "value": "Vladimir Kononovich", "type": "finder"}], "source": {"advisory": "PSIRT-151", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-24T20:17:41.440102Z", "id": "CVE-2026-18349", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-24T20:18:42.750Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18349", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-24T20:17:41.440102Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-24T20:18:38.380Z"}}], "cna": {"title": "SAMA5D44 Fault Injection Vulnerability", "source": {"advisory": "PSIRT-151", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Vladimir Kononovich"}], "impacts": [{"capecId": "CAPEC-624", "descriptions": [{"lang": "en", "value": "CAPEC-624 Hardware Fault Injection"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.3, "Automatable": "NOT_DEFINED", "attackVector": "PHYSICAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Microchip", "product": "SAMA5D4", "versions": [{"status": "affected", "version": "0"}], "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2026-07-06T07:00:00.000Z", "value": "Reported"}], "solutions": [{"lang": "en", "value": "Because this attack requires direct physical access to the device\u2019s core power supply, the most effective protection is to prevent such access. Customers deploying the SAMA5D4 in security-sensitive applications should review the physical-security assumptions of their deployment and consider measures that make the core supply rail physically inaccessible.\u00a0 This includes avoiding exposed test points or headers on that rail and employing mechanical protections such as potting, conformal coating, shielding, or tamper-resistant enclosures to prevent attachment of fault-injection equipment.", "supportingMedia": [{"type": "text/html", "value": "Because this attack requires direct physical access to the device\u2019s core power supply, the most effective protection is to prevent such access. Customers deploying the SAMA5D4 in security-sensitive applications should review the physical-security assumptions of their deployment and consider measures that make the core supply rail physically inaccessible.&nbsp; This includes avoiding exposed test points or headers on that rail and employing mechanical protections such as potting, conformal coating, shielding, or tamper-resistant enclosures to prevent attachment of fault-injection equipment.", "base64": false}]}], "references": [{"url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/sama5d44-fault-injection-vulnerability"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection.\n\nThis issue affects SAMA5D4.", "supportingMedia": [{"type": "text/html", "value": "Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection.<p>This issue affects SAMA5D4.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1247", "description": "CWE-1247 Improper protection against voltage and clock glitches"}]}], "configurations": [{"lang": "en", "value": "Access to the VCC_CORE pin.", "supportingMedia": [{"type": "text/html", "value": "Access to the VCC_CORE pin.", "base64": false}]}], "providerMetadata": {"orgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "shortName": "Microchip", "dateUpdated": "2026-10-27T16:40:02.564Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18349", "state": "PUBLISHED", "dateUpdated": "2026-10-27T16:40:02.564Z", "dateReserved": "2026-07-30T05:06:19.951Z", "assignerOrgId": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "datePublished": "2026-08-24T16:07:45.500Z", "assignerShortName": "Microchip"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "SAMA5D4", "vendor": "Microchip", "versions": [{"status": "affected", "version": "0"}]}], "source": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper protection against voltage and clock glitches vulnerability in Microchip SAMA5D4 allows Hardware Fault Injection.\n\nThis issue affects SAMA5D4."}, {"lang": "es", "value": "Vulnerabilidad de protecci\u00f3n inadecuada contra fallos transitorios de voltaje y reloj en Microchip SAMA5D4 permite la inyecci\u00f3n de fallos de hardware.\n\nEste problema afecta a SAMA5D4."}], "id": "CVE-2026-18349", "lastModified": "2026-10-12T15:10:00.207", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "PHYSICAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18349", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-24T20:17:41.440102Z", "version": "2.0.3"}}]}, "published": "2026-08-24T17:17:21.740", "references": [{"source": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "url": "https://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/sama5d44-fault-injection-vulnerability"}], "sourceIdentifier": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1247"}], "source": "dc3f6da9-85b5-4a73-84a2-2ec90b40fca5", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "sama5d4", "vendor": "microchip"}], "created": "2026-08-24T18:15:07.168957+00:00", "updated": "2026-08-24T21:10:20.277468+00:00", "vendors": ["microchip", "microchip$PRODUCT$sama5d4"]}