CVE-2026-58007: high-severity vulnerability in Altera Trusted Firmware
Unchecked SDM mailbox response address enables EL3 secure-memory corruption
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.3epss 0.1%
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Affected products
Altera · Trusted FirmwareRelated CVEs — Altera Trusted Firmware
In the same product, most dangerous first.
CVE-2026-58008HIGHUnchecked HKDF key-size input in EL3 causes a stack buffer overflowEPSS 0.1%CVE-2026-13465HIGHEL3 Stack Buffer Overflow in FCS HKDF RequestEPSS 0.1%CVE-2026-58006HIGHAltera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory CorruptionEPSS 0.1%CVE-2026-58005HIGHUnvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.EPSS 0.1%CVE-2026-58004HIGHCrafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.EPSS 0.1%CVE-2026-13467HIGHSystemic Missing Address Validation in SiP SMC HandlersEPSS 0.1%