high7.5
CVE-2024-6285
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware.
Impact
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Renesas | Rcar Gen3 | Version v2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://asrg.io/security-advisories/cve-2024-6285/
- https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b
- https://asrg.io/security-advisories/cve-2024-6285/
- https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b