CVE-2024-6287CWE-682

Incorrect Address Range Calculations

High · published June 24, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code.

When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-682 · Incorrect Calculation
Published
2024-06-24T15:37Z
EPSS history
Timeline
  • 24 JUN 15:37Z
    Incorrect Address Range Calculations
    cvelistv5