High · 8.1 CVE-2026-58004 EUVD-2026-85925GHSA-4g6r-fwpq-m2vw

Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by Altera

Description

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

Vendor	Product	Affected	Fixed
Altera	Trusted Firmware	≤ socfpga_v2.14.0	—