CVE-2026-58007: Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Me

CVE-2026-58007 · Severity: high · CVSS 8.1 · Published 2026-09-24

Executive brief

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

This issue affects Trusted Firmware: through socfpga_v2.14.0.

References

https://www.altera.com/product-security/advisory/asa-0006