UBUNTU-CVE-2024-6564

Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...

CVE-2024-6564

CVE-2024-6564 concerns a buffer overflow in Renesas arm-trusted-firmware’s module responsible for initializing RCAR components (rcar_dev_init). The root cause is using untrusted data (rcar_image_number) as a loop counter without verifying against RCAR_MAX_BL3X_IMAGE, enabling a potential full byp...

CVE-2024-6564 Buffer overflow in Rensas RCAR

Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...

CVE-2024-6564 Buffer overflow in Rensas RCAR

Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...

CVE-2024-6564

Buffer overflow in "rcardevinit" due to using due to using untrusted data rcarimagenumber as a loop counter before verifying it against RCARMAXBL3XIMAGE. This could lead to a full bypass of secure boot...

Trusted Firmware Security Vulnerability

Trusted Firmware is ARM's reference implementation of security software for the Armv8-A, Armv9-A and Armv8-M. It provides SoC developers and OEMs with a reference trusted code base that conforms to the relevant Arm specifications. A security vulnerability exists in Trusted Firmware that stems fro...

PT-2024-37720 · Renesas +1 · R-Car Gen3 +1

Name of the Vulnerable Software and Affected Versions: Renesas R-Car Gen3 versions affected versions not specified Description: The issue is caused by a buffer overflow in the rcar dev init function due to the use of untrusted data rcar image number as a loop counter before verifying it against...

CBL Mariner 2.0 Security Update: grub2 (CVE-2021-3697)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3697 advisory. - A crafted JPEG image May lead the JPEG reader to underflow its data pointer, allowing user-controlled data to ...

CBL Mariner 2.0 Security Update: grub2 (CVE-2021-3695)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3695 advisory. - A crafted 16-bit grayscale PNG image May lead to a out-of-bounds write in the heap area. An attacker may take...

CBL Mariner 2.0 Security Update: grub2 (CVE-2023-4692)

The version of grub2 installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-4692 advisory. - An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue May allow an attacker to...

CVE-2024-21482

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image...

CVE-2024-21482 Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image...

CVE-2024-21482 Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux Boot Loader

Memory corruption during the secure boot process, when the bootm command is used, it bypasses the authentication of the kernel/rootfs image...

CVE-2024-21482

CVE-2024-21482 : Memory corruption during the secure boot process in the Linux boot loader when the bootm command is used, bypassing authentication of the kernel/rootfs image. Affected component is the boot loader used in Qualcomm/Linux environments; the vulnerability enables potential unauthoriz...

PT-2024-18903 · Qualcomm · Snapdragon +68

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption during the secure boot process. When the bootm command is used, it bypasses the authentication of the kernel/rootfs...

Debian dla-3852 : ovmf - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3852 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3852-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3852-1] edk2 security update

Debian LTS Advisory DLA-3852-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 30, 2024 https://wiki.debian.org/LTS Package : edk2 Version : 020181115.85588389-3+deb10u4 CVE ID : CVE-2023-48733 Mate Kukri discovered the Debian build of EDK2, a UEFI firmware...

PT-2024-6025 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue is related to the use of default cryptographic keys in the Dell BIOS, which could allow a high-privileged attacker with local access to bypass Secure Boot and...

SUSE CVE-2024-6287

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite ...

CVE-2024-6287

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite ...