An out-of-bounds read vulnerability exists in Altera Trusted Firmware on the HPS, allowing a non‑secure EL1 process to access arbitrary physical addresses through the EL3 interface. This flaw enables privilege escalation and can lead to buffer overflows, compromising the integrity and confidentiality of sensitive data within the hardware system.

Altera Trusted Firmware, specifically SOCFPGA version 2.14.0, has been identified as affected by this vulnerability. Devices running this firmware on Altera hardware platforms are at risk.

The CVSS score of 8.3 indicates high severity, but EPSS is not available and the issue is not listed in CISA KEV. The attack is inferred to be local, requiring physical or privileged role at the EL1 level to exploit the mailbox pointer weakness. No publicly available exploit is documented, but the potential impact of arbitrary physical memory access is substantial.