CVE-2024-6564

Buffer overflow in "rcar_dev_init" due to using due to using untrusted data (rcar_image_number) as a loop counter before verifying it against RCAR_MAX_BL3X_IMAGE. This could lead to a full bypass of secure boot.

CVE-2024-6563

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. This vulnerability is associated with program files https://github.Com/renesas-rcar/arm-trusted-firmware/blob/rcar_gen3_v2.5/drivers/renesas/common/io...

CVE-2024-1633

During the secure boot, bl2 (the second stage ofthe bootloader) loops over images defined in the table “bl2_mem_params_descs”.For each image, the bl2 reads the image length and destination from the image’scertificate. Because of the way of reading from the image, which base on 32-bit unsigned integ...