CVE-2026-58004
HighCVSS 8.1Summary
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware through socfpga_v2.14.0.
Risk Assessment
An attacker could exploit this flaw to escalate privileges and access protected resources, potentially leading to device takeover. In embedded environments, this may result in serious security consequences.
Recommendation
Update Altera Trusted Firmware to a version later than socfpga_v2.14.0 that contains the fix. It is also recommended to implement additional memory protection mechanisms if available.
Other vulnerabilities in Altera Trusted Firmware
See all- CVE-2026-58008High
Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58007High
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58006High
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-58005High
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-13467High
Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware through socfpga_v2.14.0.
- CVE-2026-13466High
A vulnerability in Altera Trusted Firmware on HPS is caused by incorrect calculation of buffer size, leading to buffer overflow. This issue affects versions through socfpga_v2.14.0.
- CVE-2026-13465High
A stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows exploitation of improperly configured or implemented memory protections. This issue affects versions through socfpga_v2.14.0.
Original NVD description (English source)
Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.