CVE-2026-58006 — Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

CVE-2026-58006

Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption PUBLISHED

Description (CNA)

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected (CNA)

Vendor / product	Versions
Altera / Trusted Firmware	affected 0 through socfpga_v2.14.0

CWE

CWE-822

References

https://www.altera.com/product-security/advisory/asa-0006

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.