TF
Product
Trusted Firmware
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 0Low 0
Watch
Add Trusted Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58008 | 8.1 | Sep 24 | Unchecked HKDF key-size input in EL3 causes a stack buffer overflow Affected: through socfpga_v2.14.0 |
| CVE-2026-58007 | 8.1 | Sep 24 | Unchecked SDM mailbox response address enables EL3 secure-memory corruption Affected: through socfpga_v2.14.0 |
| CVE-2026-58006 | 8.1 | Sep 24 | Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption Affected: through socfpga_v2.14.0 |
| CVE-2026-58005 | 8.1 | Sep 24 | Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3. Affected: through socfpga_v2.14.0 |
| CVE-2026-58004 | 8.1 | Sep 24 | Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware. Affected: through socfpga_v2.14.0 |
| CVE-2026-13467 | 8.1 | Sep 24 | Systemic Missing Address Validation in SiP SMC Handlers Affected: through socfpga_v2.14.0 |
| CVE-2026-13466 | 8.1 | Sep 24 | Unit Confusion in VAB Authentication Affected: through socfpga_v2.14.0 |
| CVE-2026-13465 | 8.1 | Sep 24 | EL3 Stack Buffer Overflow in FCS HKDF Request Affected: through socfpga_v2.14.0 |
Showing 8