Altera vulnerabilities

CVEs per yearBy the year they were published

1. 20256
2. 202614

Newest CVEs

• CVE-2026-58008

  Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

  Altera · Trusted Firmware

  High8.3
• CVE-2026-58007

  Unchecked SDM mailbox response address enables EL3 secure-memory corruption

  Altera · Trusted Firmware

  High8.3
• CVE-2026-58006

  Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

  Altera · Trusted Firmware

  High8.3
• CVE-2026-58005

  Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

  Altera · Trusted Firmware

  High8.3
• CVE-2026-58004

  Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

  Altera · Trusted Firmware

  High8.3
• CVE-2026-13467

  Systemic Missing Address Validation in SiP SMC Handlers

  Altera · Trusted Firmware

  High8.3
• CVE-2026-13466

  Unit Confusion in VAB Authentication

  Altera · Trusted Firmware

  High8.3
• CVE-2026-13465

  EL3 Stack Buffer Overflow in FCS HKDF Request

  Altera · Trusted Firmware

  High8.3
• CVE-2025-14625

  Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

  Altera · Quartus Prime Standard

  Medium5.4
• CVE-2025-14614

  Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

  Altera · Quartus Prime Standard

  Medium5.4