CVE-2026-58005

Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3. PUBLISHED

Description (CNA)

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected (CNA)

Vendor / product	Versions
Altera / Trusted Firmware	affected 0 through socfpga_v2.14.0

CWE

CWE-119

References

https://www.altera.com/product-security/advisory/asa-0006

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.