A trusted firmware component on certain SoCFPGA devices validates a mailbox output pointer incorrectly, allowing a reference to an untrusted memory location. The flaw qualifies as an untrusted pointer dereference (CWE-822) and can corrupt secure memory held by the EL3 firmware. If exploited, an attacker could alter critical control data that the secure monitor uses, potentially gaining elevated privileges or disrupting system integrity.

The vulnerability applies to Altera Trusted Firmware running on the HPS platform, specifically versions identified through socfpga_v2.14.0. Other earlier or later revisions are not explicitly listed as affected, but the advisory recommends applying the latest firmware release to avoid the issue.

The CVSS score of 8.3 indicates high severity, while no EPSS data is currently available. The flaw is not listed in the CISA KEV catalog, suggesting no widespread exploitation reports yet. Based on the description, the likely attack vector involves interacting with the BL31 mailbox interface, which may require local privileged access to the HPS side or exploit of a misconfigured memory protection scheme. The use of insecure pointers and lack of validation increases the likelihood that a successful exploit can modify secure-state memory, compromising confidentiality, integrity, and availability of the entire platform.