CVE-2024-6287 - CVE House
Back to Database
Status published High CVE-2024-6287

Incorrect Address Range Calculations

Vulnerability Description

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-6287

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Tomer Fichman

References

More from Renesas

View All →
CVE-2024-6564
Buffer overflow in Rensas RCAR
Medium 6.7
CVE-2024-6563
Buffer Overflow Arbitrary Write
High 7.5
CVE-2024-6285
Integer Underflow in Memory Range Check in Renesas RCAR
High 7.5
CVE-2024-1633
FIP Header Integer Overflow
Low 2

Affected Vendor

Affected Software

rcar_gen3_v2.5
Vulnerable Versions:
6a96c18c474e6339fab93f54d52aa7dcc4b70e52

Timeline

Official Publish: June 24th, 2024
Last Modified: August 1st, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-682

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.