CVE-2026-13466

Unit Confusion in VAB Authentication

Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on HPS allows Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-58004

Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-58005

Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.

Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privilege Escalation and Overflow Buffers. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-58006

Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-58008

Unchecked HKDF key-size input in EL3 causes a stack buffer overflow

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-13465

EL3 Stack Buffer Overflow in FCS HKDF Request

Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-58007

Unchecked SDM mailbox response address enables EL3 secure-memory corruption

Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2026-13467

Systemic Missing Address Validation in SiP SMC Handlers

Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections. This issue affects Trusted Firmware: through socfpga_v2.14.0.

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed

Vendors

Altera

Products

Trusted Firmware

CVE-2025-14625

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Prime Lite: from 19.1 through 24.1.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Lite Quartus Prime Standard Quartus Prime and 1 more

CVE-2025-14596

Quartus Prime Pro Edition Installer Advisory

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Pro Quartus Prime Windows

CVE-2025-14599

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard Installer (SFX) on Windows, Altera Quartus Prime Lite  Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Lite Quartus Prime Standard Quartus Prime and 1 more

CVE-2025-14605

Quartus Prime Pro Edition Advisory

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro on Windows (System Console modules) allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 17.0 through 25.1.1.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Pro Quartus Prime Windows

CVE-2025-14614

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

Insecure Temporary File vulnerability in Altera Quartus Prime Standard  Installer (SFX) on Windows, Altera Quartus Prime Lite  Installer (SFX) on Windows allows Explore for Predictable Temporary File Names.This issue affects Quartus Prime Standard: from 23.1 through 24.1; Quartus Prime Lite: from 23.1 through 24.1.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Lite Quartus Prime Standard Quartus Prime and 1 more

CVE-2025-14612

Quartus Prime Pro Edition Advisory

Insecure Temporary File vulnerability in Altera Quartus Prime Pro  Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Pro Quartus Prime Windows

CVE-2025-13670

High Level Synthesis Compiler Security Advisory

The High Level Synthesis Compiler i++ command for Windows is vulnerable to a DLL planting vulnerability

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

High Level Synthesis Compiler High Level Synthesis Compiler Windows

CVE-2025-13669

High Level Synthesis Compiler Security Advisory

Uncontrolled Search Path Element vulnerability in Altera High Level Synthesis Compiler on Windows allows Search Order Hijacking.This issue affects High Level Synthesis Compiler: from 19.1 through 24.3.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

High Level Synthesis Compiler High Level Synthesis Compiler Windows

CVE-2025-13664

Quartus Prime Standard Security Advisory

A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Standard Quartus Prime Windows

CVE-2025-13665

Quartus Prime Standard Security Advisory

The System Console Utility for Windows is vulnerable to a DLL planting vulnerability

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Standard Quartus Prime Windows

CVE-2025-13663

Quartus Prime Pro Edition Installer Advisory

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Pro Quartus Prime Windows

CVE-2025-13668

Quartus Prime Pro Edition Advisory

A potential security vulnerability in Quartus® Prime Pro Edition Design Software may allow escalation of privilege.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Altera Intel Microsoft

Products

Quartus Prime Pro Quartus Prime Windows