Out-of-Bounds Read Vulnerability in Altera Trusted Firmware
CVE-2026-58005

8.3HIGH

Key Information:

Vendor

Altera

Status
Trusted Firmware
Vendor
CVE Published:
24 September 2026

What is CVE-2026-58005?

An out-of-bounds read vulnerability exists in Altera Trusted Firmware, potentially allowing attackers to exploit the issue for privilege escalation and buffer overflow. The vulnerability primarily affects the socfpga_v2.14.0 version of the firmware, posing significant security risks to systems that utilize this software. Mitigating this vulnerability is crucial for maintaining the integrity and security of devices reliant on the affected firmware.

Affected Version(s)

Trusted Firmware ARM 0

References

https://www.altera.com/product-security/advisory/asa-0006

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.