CVE-2018-18056

An issue was discovered in the Texas Instruments (TI) TM4C, MSP432E and MSP432P microcontroller series. The eXecute-Only-Memory (XOM) implementation prevents code read-outs on protected memory by generating bus faults. However, single-stepping and using breakpoints is allowed in XOM-protected flash memory. As a consequence, it is possible to execute single instructions with arbitrary system states (e.g., registers, status flags, and SRAM content) and observe the state changes produced by the unknown instruction. An attacker could exploit this vulnerability by executing protected and unknown instructions with specific system states and observing the state changes. Based on the gathered information, it is possible to reverse-engineer the executed instructions. The processor acts as a kind of "instruction oracle."

• CWE-200

• https://www.usenix.org/conference/woot19/presentation/schinkTechnical Description, Third Party Advisory
• https://www.usenix.org/system/files/woot19-paper_schink.pdfTechnical Description, Third Party Advisory
• https://www.usenix.org/conference/woot19/presentation/schinkTechnical Description, Third Party Advisory
• https://www.usenix.org/system/files/woot19-paper_schink.pdfTechnical Description, Third Party Advisory

Published

Aug 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18026IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possi…
• CVE-2018-18029Navigate CMS has Stored XSS via the navigate.php Title field…
• CVE-2018-1803IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…6.1
• CVE-2018-18035A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 P…
• CVE-2018-1804IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…3.7
• CVE-2018-1805IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.…4.3
• CVE-2018-18058An issue was discovered in Bitdefender Engines before 7.7666…
• CVE-2018-18059An issue was discovered in Bitdefender Engines before 7.7667…
• CVE-2018-18060An issue was discovered in Bitdefender Engines before 7.7680…
• CVE-2018-18061An issue was discovered in dialog.php in tecrail Responsive …
• CVE-2018-18062An issue was discovered in dialog.php in tecrail Responsive …
• CVE-2018-18064cairo through 1.15.14 has an out-of-bounds stack-memory writ…6.5