THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2024-6285

Integer Underflow in Memory Range Check in Renesas RCAR

Assigner:ASRG
Reserved:2024-06-24
Published:2024-06-24
Updated:2024-06-24

Description

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.



HIGH: 7.5CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-191 Integer Underflow (Wrap or Wraparound)

Product status

Default status
unaffected

c2f286820471ed276c57e603762bd831873e5a17 before b596f580637bae919b0ac3a5471422a1f756db3b
affected

Credits

Tomer Fichman finder

References

https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b patch

https://asrg.io/security-advisories/cve-2024-6285/ third-party-advisory

cve.org CVE-2024-6285

nvd.nist.gov CVE-2024-6285

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-6285
Find us on
Data Privacy
Terms of Use
Logo Silicon Valley Europe
Logo BSI Allianz für Cyber-Sicherheit