This vulnerability (CVE-2026-58007) in Altera Trusted Firmware on HPS is classified as CWE-822 (Untrusted Pointer Dereference). It affects versions through socfpga_v2.14.0 and allows attackers with high privileges to exploit improperly configured or implemented memory protections by dereferencing untrusted pointers. The CVSS 4.0 score is 8.3 (high), with local attack vector, low complexity, no attack transfer, high privileges required, no user interaction, and high impacts on confidentiality, integrity, and availability.

Successful exploitation could compromise memory protections, potentially leading to unauthorized access or modification of sensitive data and disruption of system availability. However, exploitation requires high privileges and local access, limiting the attack surface.

No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to systems running affected versions and monitor for suspicious activity consistent with privilege misuse.