This vulnerability (CVE-2026-58006) is an untrusted pointer dereference in Altera Trusted Firmware on HPS, linked to improper memory protection configurations or implementations. It affects versions up to socfpga_v2.14.0. The CVSS 4.0 vector indicates local attack vector, low attack complexity, no attack technique, high privileges required, no user interaction, low vulnerability confidentiality, high integrity and availability impacts, low scope, and high security impact. No vendor advisory or patch information is currently available.

The vulnerability allows a privileged local attacker to exploit improper memory protections via untrusted pointer dereference, potentially leading to integrity and availability impacts on the system. The CVSS score of 8.3 reflects a high severity, but exploitation requires high privileges and local access, limiting the attack surface. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor Altera's advisories for updates. Until a fix is available, restricting privileged local access and ensuring proper configuration of memory protections may reduce risk.