Skip to content
OpenAdvisories
High · 8.1 CVE-2026-58005 EUVD-2026-85926GHSA-ffc9-cqrj-7hpp

Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by Altera

Description

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected products

VendorProductAffectedFixed
Altera Trusted Firmware ≤ socfpga_v2.14.0 —

References