CVE-2026-58008 — Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

CVE-2026-58008

Unchecked HKDF key-size input in EL3 causes a stack buffer overflow PUBLISHED

Description (CNA)

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Affected (CNA)

Vendor / product	Versions
Altera / Trusted Firmware	affected 0 through socfpga_v2.14.0

CWE

CWE-121

References

https://www.altera.com/product-security/advisory/asa-0006

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.