Skip to content
OpenAdvisories
High · 8.1 CVE-2026-58006 EUVD-2026-85927GHSA-72h2-wwh5-8975

Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by Altera

Description

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected products

VendorProductAffectedFixed
Altera Trusted Firmware ≤ socfpga_v2.14.0 —

References