CVE-2026-58005
Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.
CVSS score
8.3
EPSS probability
%0.1
Risk score
0.0
Published
18 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.3
CVE-2026-58008
Unchecked HKDF key-size input in EL3 causes a stack buffer overflow
A
Patch status unknownEPSS %0
8.3
CVE-2026-13465
EL3 Stack Buffer Overflow in FCS HKDF Request
A
Patch status unknownEPSS %0
8.3
CVE-2026-58007
Unchecked SDM mailbox response address enables EL3 secure-memory corruption
A
Patch status unknownEPSS %0
8.3
CVE-2026-58006
Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption
A
Patch status unknownEPSS %0
8.3
CVE-2026-58004
Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.
A
Patch status unknownEPSS %0
8.3
CVE-2026-13467
Systemic Missing Address Validation in SiP SMC Handlers
A
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-58005"