Altera Trusted Firmware vulnerabilities

Latest Altera Trusted Firmware CVEs

Newest publication first

1. CVE-2026-58008 Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

2. CVE-2026-58007 Unchecked SDM mailbox response address enables EL3 secure-memory corruption

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

3. CVE-2026-58006 Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

4. CVE-2026-58005 Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

5. CVE-2026-58004 Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

6. CVE-2026-13467 Systemic Missing Address Validation in SiP SMC Handlers

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

7. CVE-2026-13466 Unit Confusion in VAB Authentication

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

8. CVE-2026-13465 EL3 Stack Buffer Overflow in FCS HKDF Request

   Published 2026-09-24

   High·CVSS 8.3 EPSS 0.11%

   Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.