Altera Trusted Firmware

• CVE-2026-58008 High 8.1 Unchecked HKDF key-size input in EL3 causes a stack buffer overflow 0.1%
• CVE-2026-58007 High 8.1 Unchecked SDM mailbox response address enables EL3 secure-memory corruption 0.1%
• CVE-2026-58006 High 8.1 Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption 0.1%
• CVE-2026-58005 High 8.1 Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3. 0.1%
• CVE-2026-58004 High 8.1 Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware. 0.1%
• CVE-2026-13467 High 8.1 Systemic Missing Address Validation in SiP SMC Handlers 0.1%
• CVE-2026-13466 High 8.1 Unit Confusion in VAB Authentication 0.1%
• CVE-2026-13465 High 8.1 EL3 Stack Buffer Overflow in FCS HKDF Request 0.1%