CVE-2026-58007highCWE-822

CVE-2026-58007: falha de alta gravidade em Altera Trusted Firmware

Unchecked SDM mailbox response address enables EL3 secure-memory corruption

Publicada em

Seguir esta CVE+ Monitorar Trusted

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.3epss 0.1%
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Produtos afetados
Altera · Trusted Firmware
CVEs relacionadas — Altera Trusted Firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2026-58008HIGHUnchecked HKDF key-size input in EL3 causes a stack buffer overflowEPSS 0.1%CVE-2026-13465HIGHEL3 Stack Buffer Overflow in FCS HKDF RequestEPSS 0.1%CVE-2026-58006HIGHAltera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory CorruptionEPSS 0.1%CVE-2026-58005HIGHUnvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.EPSS 0.1%CVE-2026-58004HIGHCrafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.EPSS 0.1%CVE-2026-13467HIGHSystemic Missing Address Validation in SiP SMC HandlersEPSS 0.1%