Skip to content
OpenAdvisories
High · 8.1 CVE-2026-58008 EUVD-2026-85929GHSA-rp2j-q3xg-2qhf

Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

Published Sep 24, 2026 · Updated Sep 24, 2026 · Assigned by Altera

Description

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected products

VendorProductAffectedFixed
Altera Trusted Firmware ≤ socfpga_v2.14.0 —

References