Untrusted Pointer Dereference in Altera Trusted Firmware Affects HPS
CVE-2026-58006

8.3HIGH

Key Information:

Vendor

Altera

Status
Trusted Firmware
Vendor
CVE Published:
24 September 2026

What is CVE-2026-58006?

An untrusted pointer dereference vulnerability exists in Altera Trusted Firmware specifically on HPS, which can lead to exploitation through incorrectly configured or implemented memory protections. This flaw allows attackers to manipulate system memory, posing significant risks to data integrity and system stability. Developers should assess their implementations and apply necessary updates to safeguard against potential exploitation.

Affected Version(s)

Trusted Firmware ARM 0

References

https://www.altera.com/product-security/advisory/asa-0006

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.