Altera Trusted Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Altera Trusted Firmware: 8 record(s), with affected versions and fixes.
CVE-2026-58008
High · 8.1
CWE-121 Sep 24, 2026
Unchecked HKDF key-size input in EL3 causes a stack buffer overflow
Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-58007
High · 8.1
CWE-822 Sep 24, 2026
Unchecked SDM mailbox response address enables EL3 secure-memory corruption
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-58006
High · 8.1
CWE-822 Sep 24, 2026
Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-58005
High · 8.1
CWE-119 Sep 24, 2026
Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-58004
High · 8.1
CWE-125 Sep 24, 2026
Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-13467
High · 8.1
CWE-787 Sep 24, 2026
Systemic Missing Address Validation in SiP SMC Handlers
Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-13466
High · 8.1
CWE-131 Sep 24, 2026
Unit Confusion in VAB Authentication
Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVE-2026-13465
High · 8.1
CWE-121 Sep 24, 2026
EL3 Stack Buffer Overflow in FCS HKDF Request
Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.