Nuvoton's NuMicro M3351: a 144 MHz, 5V-Immunity Cortex-M33 Platform for Robotics and Industrial Automation

恒森科技
NuvotonMCUCortex-M33Industrial AutomationRobotics
On September 18, 2026, Nuvoton launched the NuMicro M3351 series of 32-bit MCUs: an Arm Cortex-M33 core at up to 144 MHz with DSP and a single-precision FPU, a 2.7V to 5.5V supply that runs directly in 5V control systems without a regulator or level shifter, an industrial -40C to +105C range, ESD HBM of plus/minus 4 kV and EFT immunity of 4.4 kV, 256 KB to 1 MB of Flash (the 1 MB parts are Dual-Bank with ECC and Bank Swap for FOTA), up to two CAN FD and ten UART interfaces, a 12-bit 1.7 MSPS and a 14-bit 1.0 MSPS SAR ADC, up to 24 channels of 16-bit PWM plus two EQEI, and TrustZone with SHA-256/ECDSA-P256 secure boot. Packages run from QFN33 to LQFP128, supported by the NuMaker-M3351KJ board and Nu-Link, targeting closed-loop control in robotic joints, motors and industrial automation.

On September 18, 2026, Nuvoton Technology announced the NuMicro M3351 series of 32-bit microcontrollers: an Arm Cortex-M33 core running at up to 144 MHz with the full DSP instruction set and a single-precision FPU, an operating voltage range of 2.7V to 5.5V that lets the chip sit directly inside a 5V control loop without an extra regulator or level shifter, an industrial temperature range of -40°C to +105°C, ESD HBM of ±4 kV, EFT immunity of ±4.4 kV and latch-up of ±200 mA, 256 KB to 1 MB of Flash (the 1 MB parts are Dual-Bank with ECC and Bank Swap for FOTA), and up to two CAN FD interfaces. Nuvoton positions it as a "5V high-immunity control platform," and names the target applications directly: robotic joints, motors, pumps, valves, actuators and power control loops. (Source: Nuvoton official press release, 2026-09-18.)

Nuvoton's 5V noise-immunity know-how lands on an M33 core

Industrial automation, smart appliances and power control still run a great deal of their control interface on 5V logic, in high-noise and electrically hostile environments. Nuvoton has a long history in 5V MCUs, but that tier was built on 8-bit 8051 parts and Cortex-M0 devices, with a hard ceiling on compute. The M3351 moves that 5V design experience onto an Armv8-M Cortex-M33: 144 MHz, DSP and FPU, hardware TrustZone isolation, two CAN FD interfaces and up to 106 GPIO. One chip can now close real-time control loops and aggregate multiple communication buses at the same time, instead of splitting the job between a noise-tolerant 5V part and a compute part.

The family splits into three memory tiers — 1 MB Flash / 128 KB SRAM, 512 KB / 128 KB and 256 KB / 48 KB — across QFN33 (5 × 5 mm), QFN48, LQFP48, LQFP64, LQFP100 and LQFP128 (14 × 14 mm) packages. Small packages suit joint modules and sensor nodes; the large ones suit multi-axis drive boards and communication gateways. Worth stating plainly: the launch material makes no AEC-Q100 claim. The M3351 is an industrial-grade part (-40°C to +105°C); automotive qualification lives in a different Nuvoton line, the M0A23 (AEC-Q100 Grade 1, 2.4V–5.5V, -40°C to +125°C). The two are not interchangeable.

Specifications: memory, analog, control, connectivity and security

  • Core: Cortex-M33 with TrustZone, up to 144 MHz; DSP instructions; single-precision FPU; 8-region MPU; up to 480 external interrupts.
  • Memory: up to 1 MB Dual-Bank Flash with ECC, background operation and Bank Swap; a dedicated 64 KB Data Flash rated at 100,000 program/erase cycles that can be written while code keeps executing from APROM; 32 KB Secure Boot ROM; 16 KB LDROM; up to 128 KB SRAM with ECC; an External Bus Interface (8/16-bit, i80 LCD compatible).
  • Analog: one 12-bit 1.7 MSPS SAR ADC (24 channels); one 14-bit 1.0 MSPS SAR ADC (16 channels); one 12-bit 1.0 MSPS buffered DAC; two analog comparators; internal 2.56V / 3.072V / 4.096V reference and a temperature sensor.
  • Control: up to 24 channels of 16-bit PWM/BPWM (12 + 12); up to two enhanced quadrature encoder interfaces (EQEI); one ECAP; four 32-bit timers; 12-channel PDMA; hardware trigger paths between PWM, ADC and the comparators to cut CPU load.
  • Connectivity: two CAN FD; ten UARTs; three I²C up to 3.4 Mbps; one each of I3C, QSPI, SPI/I²S and SPI; two USCI ports configurable as UART/SPI/I²C; USB 2.0 Full-Speed Device/Host with an integrated transceiver (crystal-less operation in device mode).
  • Security: TrustZone secure/non-secure partitioning; Secure Boot verified with SHA-256 and ECDSA-P256; TRNG and PRNG; AES-256, SHA and HMAC-SHA hardware acceleration; up to two execute-only-memory (XOM) regions.
  • Power: 87.08 µA/MHz in normal run at 5.0V/25°C; 219.48 µA in NPD2; 24.13 µA in SPD1 with 64 KB SRAM retained; 34 µA for the RTC on VBAT.
  • Development: NuMaker-M3351KJ/KI boards with the Nu-Link debugger; Keil MDK Nuvoton Edition, IAR EWARM and VS Code; FreeRTOS, Zephyr and RT-Thread; emWin, LVGL and Qt for MCU.

How Cortex-M33 differs from M0+ and M4

Arm's own Cortex-M Processor Comparison Table (Version 2022) settles the gap, and it is architectural rather than a vendor tuning choice. Cortex-M0+ is Armv6-M at 0.99 DMIPS/MHz and 2.46 CoreMark/MHz, with no TrustZone, no DSP, no FPU and an 8-region MPU. Cortex-M4 is Armv7-M at 1.26 DMIPS/MHz and 3.54 CoreMark/MHz, with DSP and an optional single-precision FPU — but still no TrustZone and still an 8-region MPU. Cortex-M33 is Armv8-M Mainline at 1.54 DMIPS/MHz and 4.10 CoreMark/MHz, with optional TrustZone, configurable DSP and FPU, up to 16 MPU regions, plus a coprocessor interface and Arm Custom Instructions.

Scaled to 144 MHz, that puts the M3351 at roughly 221 DMIPS and 590 CoreMark, which lines up with Nuvoton's own family-page claim of 221–277 DMIPS across 144–180 MHz. At the same clock, an M4 loses about 18% of the DMIPS rating (1.26 versus 1.54). The more consequential difference is TrustZone, which M0+ and M4 simply cannot offer: keys, Secure Boot and update code live in the secure world, application logic in the non-secure world, enforced in hardware so a compromise on the application side still does not yield the keys. For connected industrial equipment that must pass a security review and support remote updates, that has moved from a bonus to a gate.

What 5V direct connection removes — and how the field compares

5V has two practical advantages. Physically, the absolute difference between logic high and low is larger, so noise margin is wider and a given interference amplitude is less likely to flip a line next to a VFD, a servo drive or a relay. In engineering terms, a great deal of field equipment is still 5V: a 5V CAN transceiver commonly drives RXD above 4V, which already exceeds a 3.3V MCU's supply rail, and legacy sensors with a logic-high threshold near 4V simply will not see a 3.3V MCU's output as a high (sources: CNTRONICS application note on 5V CAN transceivers and 3.3V MCUs; industry hardware-design material on level shifting).

The cost of bridging that gap is not just a few components. A resistor divider dulls signal edges through its RC time constant, so it only works for DC or slow signals; I²C and SPI need MOSFETs or dedicated translators; every added part is another BOM line and another failure point. The M3351's 2.7V–5.5V range with 5V-level I/O deletes that circuit entirely. Looking across what is publicly available in the same tier:

  • Nuvoton M3351 (Sept 2026): Cortex-M33 with TrustZone, 144 MHz, 2.7–5.5V, -40 to 105°C, 1 MB Dual-Bank Flash / 128 KB SRAM, two CAN FD.
  • Nuvoton M3331 (3.3V sibling): Cortex-M33, 180 MHz, 1.7–3.6V, up to 512 KB Dual-Bank Flash / 320 KB SRAM — pick it when you want compute rather than 5V.
  • NXP MCX E24: Cortex-M4F at 112 MHz, 2.7–5.5V, -40 to 125°C in RUN mode, up to 2 MB Flash, aimed at IEC 61508 functional safety (up to SIL 2); no TrustZone.
  • Renesas RX660: RXv3 at 120 MHz (709 CoreMark), 2.7–5.5V, -40 to 105/125°C, 1 MB Flash plus 32 KB Data Flash, one CAN FD, mature ecosystem with legacy RX pin compatibility.
  • TI MSPM0H321x: Cortex-M0+ at 32 MHz, 4.5–5.5V, -40 to 125°C, 64 KB Flash / 8 KB SRAM, true 5V I/O, AEC-Q100 on the -Q1 variants — a tier lower on compute, but cheap and automotive-capable.

On market size, Grand View Research estimates the global MCU market at USD 40.23 billion in 2025, reaching USD 105.32 billion by 2033 at a 13.0% CAGR (2026–2033), with 32-bit taking a 51.4% revenue share in 2025. Valuates Reports (QYR) sizes 32-bit industrial MCUs alone at USD 13.29 billion in 2025, rising to USD 25.83 billion by 2032, a 10.1% CAGR. The absolute numbers differ between houses; the direction does not — the growth is in 32-bit, and industrial is a main driver.

HSY Perspective

We carry Nuvoton, and since the M3351 launch the question we get is rarely "what's the clock speed" — it is "can I delete that whole level-shifting block off my board." The honest answer depends on what sits on the customer's I/O. If the entire chain — sensors, relays, CAN transceivers — is 5V logic, then 5V supply plus 5V I/O really does remove a row of translators and the edge-smearing headaches on fast buses. But the moment there is a 1.8V or 3.3V module on that board, you still have to partition the interfaces. No single part covers every voltage domain. And one thing keeps getting misread: the device-level ESD HBM 4 kV and EFT 4.4 kV figures describe the silicon, not the finished product. Whether the box passes the customer's own EMC pre-scan still comes down to interface protection and PCB layout — those numbers are not a system verdict.

The traps we actually see are on the software side. TrustZone partitioning has to be planned up front; coming back after the application is written to carve out secure and non-secure regions costs more than designing it in from the start. Dual-Bank with Bank Swap is the same story — it only pays off if the FOTA flow was built as a two-bank structure from day one, and retrofitting it means tearing up the update logic. Similarly, the 64 KB Data Flash is not a generic EEPROM: it erases in 8 KB pages, so the refresh rate for stored parameters and the paging strategy need to be worked out at design time or the endurance gets burned through for nothing.

Our rough rule for selection: if a design needs 5V direct connection plus secure boot, with multi-axis closed loops and CAN FD aggregation, go straight to the M3351. If it is a 3.3V system that just wants more compute and more SRAM, the M3331 sibling has 180 MHz and 320 KB with low migration cost. When a customer specifically needs automotive qualification, we will not suggest stretching the M3351 to cover it — that is the M0A23 on Nuvoton's automotive line, AEC-Q100 Grade 1, and the compute and peripheral class is far apart, so it is worth raising that requirement early. We hold samples and the NuMaker-M3351KJ board; an evaluation can start from the small QFN33 package, prove out the ADC sampling and PWM loop first, and only then decide whether to move up to LQFP100 or LQFP128. If you have a specific part number question, come talk to us.

Sources: Nuvoton press release "Nuvoton Launches NuMicro® M3351 Series: A 5V High-Immunity Control Platform Advancing Robotics and Industrial Automation" (https://www.nuvoton.com/news/news/all/TSNuvotonNews-000634/, 2026-09-18); Nuvoton M3351 series product page (https://www.nuvoton.com/products/microcontrollers/arm-cortex-m33-mcus/m3351-series/); 21ic (2026-09-18); CTIMES (2026-09-22); Arm, Cortex-M Processor Comparison Table, Version 2022 (https://documentation-service.arm.com/static/61bb37962183326f2176f8cc); Renesas RX660 product documentation; NXP MCX E24 product page; TI MSPM0H321x-Q1 datasheet; Grand View Research, Microcontroller Market Size And Share Report, 2026-2033; Valuates Reports/QYR, 32-bit Industrial Microcontroller Market.