CVE-2026-58007highCWE-822

CVE-2026-58007: fallo de gravedad alta en Altera Trusted Firmware

Unchecked SDM mailbox response address enables EL3 secure-memory corruption

Publicada el

Seguir esta CVE+ Monitorear Trusted

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.3epss 0.1%
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Productos afectados
Altera · Trusted Firmware
CVEs relacionadas — Altera Trusted Firmware

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-58008HIGHUnchecked HKDF key-size input in EL3 causes a stack buffer overflowEPSS 0.1%CVE-2026-13465HIGHEL3 Stack Buffer Overflow in FCS HKDF RequestEPSS 0.1%CVE-2026-58006HIGHAltera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory CorruptionEPSS 0.1%CVE-2026-58005HIGHUnvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.EPSS 0.1%CVE-2026-58004HIGHCrafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.EPSS 0.1%CVE-2026-13467HIGHSystemic Missing Address Validation in SiP SMC HandlersEPSS 0.1%