CVE-2024-25076

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices

Medium · published July 10, 2024

CVSS v3.1
6.8
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function responsible for validating the Flash Product Header directly uses a user-controllable size value (Length of Flash Config Section) to control a read from the QSPI device into a fixed sized buffer, resulting in a buffer overflow and execution of arbitrary code.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.8th percentile
Published
2024-07-10T00:00Z
EPSS history
Timeline
  • 10 JUL 00:00Z
    An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices
    cvelistv5