QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-6287

Back to search

CVE-2024-6287

Published: Jun 24, 2024

Modified: Aug 1, 2024

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.

VendorProductVersions

Renesas

rcar_gen3_v2.5

affected
6a96c18c474e6339fab93f54d52aa7dcc4b70e52 - < 954d488a9798f8fda675c6b57c571b469b298f04

Weaknesses (CWE)

CWE-682

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now