Vulnerabilities > CVE-2024-6285 - Integer Underflow (Wrap or Wraparound) vulnerability in Renesas Rcar Gen3 V2.5

047910
CVSS 6.7 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
renesas
CWE-191
NVD
Published: 2024-06-24
Updated: 2024-11-21

Summary

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.

Vulnerable Configurations

Part Description Count
Application
Renesas
1

Common Weakness Enumeration (CWE)

References