Lucene search
HistoryJun 24, 2024 - 4:15 p.m.
CVE-2024-6285
cve-2024-6285
integer underflow
renesas
arm-trusted-firmware
image range check
bypassing address restrictions
loading images
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware.
An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
Affected configurations
Node
renesasrcar_gen3Matchv2.5
Related
cvelist
cvelist
CVE-2024-6285 Integer Underflow in Memory Range Check in Renesas RCAR
2024-06-24 15:32:13
cve
cve
CVE-2024-6285
2024-06-24 16:15:10
osv
osv
CVE-2024-6285
2024-06-24 16:15:10
vulnrichment
vulnrichment
CVE-2024-6285 Integer Underflow in Memory Range Check in Renesas RCAR
2024-06-24 15:32:13
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-6285