CVE-2024-6287

2024-06-2416:15:11

CWE-682

ASRG

web.nvd.nist.gov

renesas arm-trusted-firmware

incorrect calculation vulnerability

local execution of code

memory range restriction

secure boot bypass

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

9.1%

JSON

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code.

When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.

Affected configurations

Nvd

Node

renesasrcar_gen3Matchv2.5

VendorProductVersionCPE
renesasrcar_gen3v2.5cpe:2.3:a:renesas:rcar_gen3:v2.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
renesas	rcar_gen3	v2.5	cpe:2.3:a:renesas:rcar_gen3:v2.5:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "arm-trusted-firmware",
    "product": "rcar_gen3_v2.5",
    "programFiles": [
      "https://github.com/renesas-rcar/arm-trusted-firmware/blob/rcar_gen3_v2.5/drivers/renesas/common/io/io_rcar.c"
    ],
    "repo": "https://github.com/renesas-rcar/arm-trusted-firmware/",
    "vendor": "Renesas",
    "versions": [
      {
        "changes": [
          {
            "at": "954d488a9798f8fda675c6b57c571b469b298f04",
            "status": "unaffected"
          }
        ],
        "lessThan": "954d488a9798f8fda675c6b57c571b469b298f04",
        "status": "affected",
        "version": "6a96c18c474e6339fab93f54d52aa7dcc4b70e52",
        "versionType": "git"
      }
    ]
  }
]