CVE-2026-13466

Description

Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Overview

State: PUBLISHED
Assigner (CNA): Altera
CVSS severity: HIGH
CVSS score: 8.3 / 10
CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
Effective score: 8.3 / 10 HIGH source: CNA overview
CWE(s): CWE-131
Reserved: 2026-06-26
Published: 2026-09-24 14:51 UTC
Last updated: 2026-09-24 14:59 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/13xxx/CVE-2026-13466.json
Linked Threat: CVE-2026-13466 — Unit Confusion in VAB Authentication

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-85923
Assigner: Altera
Published: Sep 24, 2026, 2:51:27 PM
Updated: Sep 24, 2026, 2:59:51 PM
EUVD base score (CVSS 4.0): 8.3 / 10
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
EUVD-reported EPSS: 0.0000
Vendors: Altera
Products: Trusted Firmware (0 ≤socfpga_v2.14.0)
Aliases: GHSA-h785-rv9q-vrg6

ENISA description: Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

EUVD references (1)

https://www.altera.com/product-security/advisory/asa-0006

Affected products (1)

Vendor	Product	Versions	Platforms
Altera	Trusted Firmware	`0` (affected)	ARM

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://www.altera.com/product-security/advisory/asa-0006

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

CVE-2026-13466 — Exploit & Vulnerability Details HIGH | AnonHaven

web:anonhaven.com

CVE Details CVE ID CVE-2026-13466 Published Date Sep 24, 2026 Vendor Not specified Severity HIGH CVSS v4.0 Score 8.3

2026-09-25 10:12 UTC
CVE-2026-13346 - Vulnerability Details - OpenCVE

web:app.opencve.io

Remediation No vendor fix or workaround currently provided. OpenCVE Recommended Actions Upgrade pip to the most recent release, which removes the vulnerable URL handling logic Avoid running pip download with the --only-binary flag against untrusted or unknown indexes; use official or signed indexes instead

2026-09-25 10:12 UTC
Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege ...

web:arcticwolf.com

Validate Group Policy and registry settings for Defender to ensure real-time protection, automatic remediation , and exclusion policies are secured. Temporary Workarounds Block Vulnerable Apps: Use Microsoft Defender Vulnerability Management to block or warn against execution of affected binaries for systems pending a patch .

2026-09-25 10:12 UTC
Mitigate RedSun Zero-Day Without A Patch | Qualys

web:blog.qualys.com

Key Takeaways RedSun is a critical zero-day vulnerability in Microsoft Defender that allows low-privileged users to gain SYSTEM access No patch is currently available, leaving all Defender-enabled Windows systems potentially exposed Qualys VMDR detects affected assets instantly (QID 92382) TruRisk™ Eliminate enables immediate mitigation , removing exploitability without waiting for a fix ...

2026-09-25 10:12 UTC
CVE-2026-13466 - Unit Confusion in VAB Authentication

web:cvefeed.io

The following list is the news that have been mention CVE-2026-13466 vulnerability anywhere in the article. Results are limited to the first 20 news articles due to potential performance issues. The following table lists the changes that have been made to the CVE-2026-13466 vulnerability over time.

2026-09-25 10:12 UTC
CVE-2026-13346: Pip Vulnerability (CVSS 6.5) | CVETodo

web:cvetodo.com

CVE - 2026 -13346 is a CVSS 6.5 medium-severity vulnerability in Pip. Full technical analysis, mitigations , and exploit status — updated in real time.

2026-09-25 10:12 UTC
Defender Zero-Day CVE-2026-50656 Under Active Exploit, No Patch

web:dailysecurityreview.com

Microsoft confirmed CVE - 2026 -50656, a zero-day in the Defender Malware Protection Engine allowing SYSTEM-level privilege escalation, is under active exploitation with no patch currently available.

2026-09-25 10:12 UTC
CVE-2026-13466 - Buffer Overflow in Altera Trusted Firmware…

web:vulmon.com

Vulnerability Summary Altera Trusted Firmware through socfpga_v2.14. contains a buffer size calculation vulnerability that allows overflow buffers.

2026-09-25 10:12 UTC
April 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft's April 2026 Patch Tuesday addresses 164 CVEs , featuring 8 Critical vulnerabilities, one exploited zero-day, and one disclosed zero-day.

2026-09-25 10:12 UTC
June 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft patches 206 vulnerabilities in June 2026 Patch Tuesday, including three publicly disclosed zero-days.

2026-09-25 10:12 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-13466.json.

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13466",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-24T14:59:42.934429Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-24T14:59:51.874Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "ARM"
          ],
          "product": "Trusted Firmware",
          "vendor": "Altera",
          "versions": [
            {
              "lessThanOrEqual": "socfpga_v2.14.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:altera:trusted_firmware:*:*:arm:*:*:*:*:*",
                  "versionEndIncluding": "socfpga_v2.14.0",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers.<p>This issue affects Trusted Firmware: through socfpga_v2.14.0.</p>"
            }
          ],
          "value": "Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers.\n\nThis issue affects Trusted Firmware: through socfpga_v2.14.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-131",
              "description": "CWE-131 Incorrect calculation of buffer size",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T14:51:27.734Z",
        "orgId": "04c0172e-9735-4a9d-a92a-fe01fa863447",
        "shortName": "Altera"
      },
      "references": [
        {
          "url": "https://www.altera.com/product-security/advisory/asa-0006"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Unit Confusion in VAB Authentication",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "04c0172e-9735-4a9d-a92a-fe01fa863447",
    "assignerShortName": "Altera",
    "cveId": "CVE-2026-13466",
    "datePublished": "2026-09-24T14:51:27.734Z",
    "dateReserved": "2026-06-26T20:16:45.669Z",
    "dateUpdated": "2026-09-24T14:59:51.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}