CVE-2024-9413

Description

The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.

Reserved 2024-10-01 | Published 2024-11-13 | Updated 2024-11-27 | Assigner Arm

Problem types

CWE-755 Improper Handling of Exceptional Conditions

Product status

Default status
unaffected

2.11.0
affected

References

developer.arm.com/...urity Center/SCP-Firmware Vulnerability

cve.org (CVE-2024-9413)

nvd.nist.gov (CVE-2024-9413)

Download JSON