Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code.
When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.
References
Link | Resource |
---|---|
https://asrg.io/security-advisories/cve-2024-6287/ | Third Party Advisory |
https://github.com/renesas-rcar/arm-trusted-firmware/commit/954d488a9798f8fda675c6b57c571b469b298f04 | Patch |
Configurations
History
26 Jun 2024, 14:36
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:renesas:rcar_gen3:v2.5:*:*:*:*:*:*:* | |
First Time |
Renesas
Renesas rcar Gen3 |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
Summary |
|
|
References | () https://asrg.io/security-advisories/cve-2024-6287/ - Third Party Advisory | |
References | () https://github.com/renesas-rcar/arm-trusted-firmware/commit/954d488a9798f8fda675c6b57c571b469b298f04 - Patch |
24 Jun 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-24 16:15
Updated : 2024-06-26 14:36
NVD link : CVE-2024-6287
Mitre link : CVE-2024-6287
CVE.ORG link : CVE-2024-6287
JSON object : View
Products Affected
renesas
- rcar_gen3
CWE
CWE-682
Incorrect Calculation