Riskcovery

CVE-2024-6285

Integer Underflow in Memory Range Check in Renesas RCAR

State
Published
Severity
7.5 High
Published
Jun 24, 2024
Updated
Aug 1, 2024
Reserved
Jun 24, 2024

Read the record on cve.org

Description

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HASRG

Weaknesses

  • CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

ProductVersions
rcar_gen3_v2.5Renesas
  • c2f286820471ed276c57e603762bd831873e5a17 to before b596f580637bae919b0ac3a5471422a1f756db3bAffectedfrom b596f580637bae919b0ac3a5471422a1f756db3bNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.