CVE-2026-58006

8.3 highEPSS 0.1%

High (8.3). EPSS 0.1% chance of exploitation in the next 30 days.

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

Severity

CVSS 4.0

8.3 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H

CVSS 3.1

8.1 high

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-822
Published: 2026-09-24
Modified: 2026-09-24
Record from: the NVD, synced 2026-10-19

References

https://www.altera.com/product-security/advisory/asa-0006

Check your stack JSON