CVE-2026-13466highCWE-131

CVE-2026-13466: falha de alta gravidade em Altera Trusted Firmware

Unit Confusion in VAB Authentication

Publicada em

Seguir esta CVE+ Monitorar Trusted

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.3epss 0.1%
Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Produtos afetados
Altera · Trusted Firmware
CVEs relacionadas — Altera Trusted Firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2026-58008HIGHUnchecked HKDF key-size input in EL3 causes a stack buffer overflowEPSS 0.1%CVE-2026-13465HIGHEL3 Stack Buffer Overflow in FCS HKDF RequestEPSS 0.1%CVE-2026-58007HIGHUnchecked SDM mailbox response address enables EL3 secure-memory corruptionEPSS 0.1%CVE-2026-58006HIGHAltera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory CorruptionEPSS 0.1%CVE-2026-58005HIGHUnvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.EPSS 0.1%CVE-2026-58004HIGHCrafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.EPSS 0.1%