CVE-2024-6285: Integer Underflow in Memory Range Check in Renesas RCAR
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6285?
CVE-2024-6285 is classified as a high-severity vulnerability due to its potential to bypass address restrictions.
How do I fix CVE-2024-6285?
To fix CVE-2024-6285, update to the latest version of Renesas Rcar Gen3 firmware that addresses this vulnerability.
What causes CVE-2024-6285?
CVE-2024-6285 is caused by an integer underflow in image range check calculations in the Renesas arm-trusted firmware.
What are the risks associated with CVE-2024-6285?
The risks associated with CVE-2024-6285 include the potential for unauthorized loading of images to restricted memory addresses.
Which software versions are affected by CVE-2024-6285?
CVE-2024-6285 affects Renesas Rcar Gen3 firmware version 2.5.