CVE-2024-6287: Incorrect Address Range Calculations
Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code.
When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6287?
CVE-2024-6287 is considered a high severity vulnerability due to the potential for local code execution.
How do I fix CVE-2024-6287?
To fix CVE-2024-6287, upgrade to a patched version of Renesas arm-trusted-firmware that addresses the memory overlap checks.
Who is affected by CVE-2024-6287?
CVE-2024-6287 affects users of Renesas R-Car Gen3 v2.5.
What is the impact of exploiting CVE-2024-6287?
Exploiting CVE-2024-6287 allows an attacker to execute arbitrary code locally, potentially compromising the system.
What causes CVE-2024-6287?
CVE-2024-6287 is caused by incorrect image overlap checks in the memory management of the arm-trusted-firmware.