CVE-2024-6285

Katalog CVE

CVSS 6.7 · Medium EPSS 0,19%

Kerentanan Integer Underflow (Wrap or Wraparound) pada renesas rcar gen3. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.

Rincian

Terbit di NVD

24 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b patch
• https://asrg.io/security-advisories/cve-2024-6285/ advisory pihak ketiga