CVE-2026-58006

Description

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Overview

State: PUBLISHED
Assigner (CNA): Altera
CVSS severity: HIGH
CVSS score: 8.3 / 10
CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Effective score: 8.3 / 10 HIGH source: CNA overview
CWE(s): CWE-822
Reserved: 2026-06-26
Published: 2026-09-24 14:52 UTC
Last updated: 2026-09-24 15:01 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/58xxx/CVE-2026-58006.json
Linked Threat: CVE-2026-58006 — Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-85927
Assigner: Altera
Published: Sep 24, 2026, 2:52:16 PM
Updated: Sep 24, 2026, 3:01:08 PM
EUVD base score (CVSS 4.0): 8.3 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EUVD-reported EPSS: 0.0000
Vendors: Altera
Products: Trusted Firmware (0 ≤socfpga_v2.14.0)
Aliases: GHSA-72h2-wwh5-8975

ENISA description: Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

EUVD references (1)

https://www.altera.com/product-security/advisory/asa-0006

Affected products (1)

Vendor	Product	Versions	Platforms
Altera	Trusted Firmware	`0` (affected)	ARM

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://www.altera.com/product-security/advisory/asa-0006

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

CVE-2026-58006 - HIGH Vulnerability - AnonHaven

web:anonhaven.com

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14..

2026-09-25 10:11 UTC
Untrusted Pointer Dereference in Altera Trusted Firmware

web:basefortify.eu

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14..

2026-09-25 10:11 UTC
CVE-2026-58006 | CVE Alert & Security Feed

web:cvealert.net

CVE-2026-58006 - HIGH vulnerability with CVSS score 8.1

2026-09-25 10:11 UTC
CVE-2026-58006 - Altera SoCFPGA BL31 Mailbox Output Pointer Validation ...

web:cvefeed.io

The following list is the news that have been mention CVE-2026-58006 vulnerability anywhere in the article. Results are limited to the first 20 news articles due to potential performance issues. The following table lists the changes that have been made to the CVE-2026-58006 vulnerability over time.

2026-09-25 10:11 UTC
CVE-2026-58006: Altera Trusted Firmware Vulnerability

web:cvetodo.com

CVE-2026-58006 is a CVSS 8.1 high-severity vulnerability in Altera Trusted Firmware. Includes technical details, affected versions, and mitigation steps.

2026-09-25 10:11 UTC
CVE-2026-58006 - Exploits & Severity - Feedly

web:feedly.com

CVE ID : CVE-2026-58006 Published : Sept. 24, 2026 , 2:52 p.m. 15 minutes ago Description : Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.

2026-09-25 10:11 UTC
CVE-2026-58006 - GitHub Advisory Database

web:github.com

Untrusted pointer dereference vulnerability in Altera... High severity Unreviewed Published Sep 24, 2026 to the GitHub Advisory Database • Updated Sep 24, 2026

2026-09-25 10:11 UTC
CVE-2026-58006 - vulnerability database | Vulners.com

web:vulners.com

CVE-2026-58006 🗓️ 24 Sep 2026 07:52:16 Reported by Altera Type cve 🔗 web.nvd.nist.gov 👁 8 Views

2026-09-25 10:11 UTC
CVE-2026-58006: Trusted Firmware Untrusted Pointer Dereference

web:www.strix.ai

How severe is CVE-2026-58006 ? CVE-2026-58006 has a CVSS score of 8.1/10 (HIGH severity). How do I fix CVE-2026-58006 ? Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

2026-09-25 10:11 UTC
CVE-2026-58006 | Tenable®

web:www.tenable.com

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14..

2026-09-25 10:11 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-58006.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-58006",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T15:01:00.684169Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-24T15:01:08.738Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "ARM"
          ],
          "product": "Trusted Firmware",
          "vendor": "Altera",
          "versions": [
            {
              "lessThanOrEqual": "socfpga_v2.14.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:altera:trusted_firmware:*:*:arm:*:*:*:*:*",
                  "versionEndIncluding": "socfpga_v2.14.0",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.<p>This issue affects Trusted Firmware: through socfpga_v2.14.0.</p>"
            }
          ],
          "value": "Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.\n\nThis issue affects Trusted Firmware: through socfpga_v2.14.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-679",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-822",
              "description": "CWE-822 Untrusted pointer dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T14:52:16.143Z",
        "orgId": "04c0172e-9735-4a9d-a92a-fe01fa863447",
        "shortName": "Altera"
      },
      "references": [
        {
          "url": "https://www.altera.com/product-security/advisory/asa-0006"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "04c0172e-9735-4a9d-a92a-fe01fa863447",
    "assignerShortName": "Altera",
    "cveId": "CVE-2026-58006",
    "datePublished": "2026-09-24T14:52:16.143Z",
    "dateReserved": "2026-06-26T20:15:59.970Z",
    "dateUpdated": "2026-09-24T15:01:08.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}