CVE-2024-45555CWE-787

Integer Overflow to Buffer Overflow in Automotive OS Platform

High · published January 6, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
3.4
In the wild
Unconfirmed
What it is

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-01-06T10:33Z
EPSS history
Timeline
  • 06 JAN 10:33Z
    Integer Overflow to Buffer Overflow in Automotive OS Platform
    cvelistv5