CVE-2026-13467CWE-787

CVE-2026-13467

High · published September 24, 2026

CVSS v3.1

8.1

EPSS

Percentile

1.2

In the wild

Unconfirmed

What it is

Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

The record

Technical detail

CVSS v3.1: 8.1 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
CVSS v4.0: 8.3 · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EPSS: 0.00109 · 1.2th percentile
Weakness: CWE-787 · Out-of-bounds Write
Published: 2026-09-24T19:17Z

References (1)

EPSS history

Timeline