This vulnerability (CVE-2026-58004) involves an out-of-bounds read in Altera Trusted Firmware on HPS, which may allow an attacker with high privileges to escalate privileges further and cause buffer overflows. The affected versions include Trusted Firmware through socfpga_v2.14.0. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor advisory or patch information is available at this time.

Successful exploitation could allow an attacker with existing high privileges to escalate their privileges further and potentially cause buffer overflows, impacting system confidentiality, integrity, and availability. The vulnerability is rated high severity with a CVSS 4.0 score of 8.3. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor vendor channels for updates. Until a fix is available, limit access to systems running affected versions to trusted users with high privileges.