Out-of-Bounds Write Vulnerability in Altera Trusted Firmware on HPS
CVE-2026-13467

8.3HIGH

Key Information:

Vendor

Altera

Status
Trusted Firmware
Vendor
CVE Published:
24 September 2026

What is CVE-2026-13467?

An out-of-bounds write vulnerability in Altera's Trusted Firmware on HPS can be exploited due to improperly configured or implemented memory protections. This issue could allow unauthorized access or modification of memory, leading to potential data corruption or unpredictable behavior in software applications that rely on the firmware. Users are advised to review their firmware configuration and apply necessary updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Trusted Firmware ARM 0

References

https://www.altera.com/product-security/advisory/asa-0006

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.