CVE-2026-58006: Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption
Published Sep 24, 2026
·Updated
Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
This issue affects Trusted Firmware: through socfpgav2.14.0.
Affected Software
1 affected component
Altera Trusted Firmware<=socfpga_v2.14.0
Event History
Sep 24, 2026
CVE Published
via MITRE·02:52 PM
Data Sourced
via MITRE·02:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vector requires local access and high privileges, with no user interaction required. It affects Altera Trusted Firmware running on HPS.
2
What is the potential impact after exploitation?
The vulnerability can enable corruption of EL3 secure memory. The supplied severity vector indicates high integrity and availability impact, low confidentiality impact, and an impact that can extend beyond the vulnerable security authority.
3
Which versions are affected?
The issue affects Altera Trusted Firmware through socfpga_v2.14.0.