CVE-2026-58006CWE-822

CVE-2026-58006

High · published September 24, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H
CVSS v4.0
8.3 · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2026-09-24T19:17Z
References (1)
https://www.altera.com/product-security/advisory/asa-0006 · 04c0172e-9735-4a9d-a92a-fe01fa863447
EPSS history
Timeline
  • 26 SEP 03:25Z
    EPSS moved — → 0%
    epss
  • 24 SEP 14:52Z
    Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption
    cvelistv5