This vulnerability (CVE-2026-13465) is a stack-based buffer overflow in Altera Trusted Firmware on HPS, caused by improperly configured or implemented memory protections. It affects Trusted Firmware versions up to socfpga_v2.14.0. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no attack traceability, and requires high privileges. The vulnerability could lead to significant compromise of confidentiality, integrity, and availability of the system. No vendor advisory or patch information is provided, and no known exploits exist in the wild.

An attacker with high privileges on the local system could exploit this stack-based buffer overflow to compromise the Trusted Firmware, potentially leading to unauthorized code execution or system compromise. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, exploitation requires local access and high privileges, limiting the attack surface.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or vendor advisory is provided, monitor official Altera communications for updates. Until a fix is available, restrict access to systems running affected versions and limit privileges to trusted users.