Skip to content
OpenAdvisories
High · 8.1 CVE-2026-58007 EUVD-2026-85928GHSA-6j58-5gjp-qccv

Unchecked SDM mailbox response address enables EL3 secure-memory corruption

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by Altera

Description

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected products

VendorProductAffectedFixed
Altera Trusted Firmware ≤ socfpga_v2.14.0 —

References