CVE-2026-13465
HighCVSS 8.1Summary
A stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows exploitation of improperly configured or implemented memory protections. This issue affects versions through socfpga_v2.14.0.
Risk Assessment
It may lead to arbitrary code execution or bypass of memory protection mechanisms, threatening confidentiality, integrity, and availability. It affects devices with Altera Trusted Firmware on HPS.
Recommendation
Update Altera Trusted Firmware to a version later than socfpga_v2.14.0 once a fix is available. In the meantime, apply least privilege and monitor for unusual behavior.
Other vulnerabilities in Altera Trusted Firmware
See all- CVE-2026-58008High
Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58007High
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58006High
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58005High
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58004High
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-13467High
Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-13466High
A vulnerability in Altera Trusted Firmware on HPS is caused by incorrect calculation of buffer size, leading to buffer overflow. This issue affects versions through socfpga_v2.14.0.
Original NVD description (English source)
Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.