CVE-2024-6285 HIGH

CVE-2024-6285: Integer Underflow in Memory Range Check in Renesas RCAR

Vendor Renesas
Product rcar_gen3_v2.5
Weakness CWE-191
Published June 24, 2024
Last update August 1, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Local
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.

Key dates

02Disclosure timeline

June 24, 2024 CVE published
August 1, 2024 Record updated