What’s Vulnerable › Products

Altera Trusted Firmware vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Altera Trusted Firmware version is affected

Latest Altera Trusted Firmware vulnerabilities

• CVE-2026-58008 — Unchecked HKDF key-size input in EL3 causes a stack buffer overflow (CVSS 8.1)
• CVE-2026-58007 — Unchecked SDM mailbox response address enables EL3 secure-memory corruption (CVSS 8.1)
• CVE-2026-58006 — Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption (CVSS 8.1)
• CVE-2026-58005 — Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3. (CVSS 8.1)
• CVE-2026-58004 — Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware. (CVSS 8.1)
• CVE-2026-13467 — Systemic Missing Address Validation in SiP SMC Handlers (CVSS 8.1)
• CVE-2026-13466 — Unit Confusion in VAB Authentication (CVSS 8.1)
• CVE-2026-13465 — EL3 Stack Buffer Overflow in FCS HKDF Request (CVSS 8.1)