A stack-based buffer overflow exists in Altera Trusted Firmware on HPS systems, triggered by unchecked HKDF key‑size input when entering EL3 mode. The flaw permits a malicious actor to overwrite adjacent stack memory, potentially redirecting the processor’s control flow. If the overflow is successfully exploited, arbitrary code could be injected and executed with firmware privileges, compromising confidentiality, integrity, and availability of the affected device.

Altera Trusted Firmware products are affected, particularly releases that include socfpga_v2.14.0 on HPS platforms. No current patch or update has been disclosed, so all firmware built on this version remains vulnerable.

The CVSS score of 8.3 reflects high severity. EPSS data is unavailable, and the vulnerability is not listed in CISA’s KEV catalog. The exploit requires privileged access to the HPS Trusted Firmware path; while no public exploit is known, the absence of mitigations and the high CVSS suggest that it should be treated as a priority for patching once an update is released.