7.5 HIGH
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): HIGH
- Privileges required (PR): HIGH
- User interaction (UI): NONE
- Scope (S): CHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
Integer Underflow in Memory Range Check in Renesas RCAR
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
References
- https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0… patch
- https://asrg.io/security-advisories/cve-2024-6285/ third-party-advisory
- https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0… patch
- https://asrg.io/security-advisories/cve-2024-6285/ third-party-advisory
- https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0… patch x_transferred
- https://asrg.io/security-advisories/cve-2024-6285/ third-party-advisory x_transferred
Affected products
- <b596f580637bae919b0ac3a5471422a1f756db3b
- <b596f580637bae919b0ac3a5471422a1f756db3b
Matching in nixpkgs
pkgs.armTrustedFirmwareQemu
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable 2.13.0
pkgs.armTrustedFirmwareS905
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable 2.13.0
pkgs.armTrustedFirmwareTools
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable 2.13.0
pkgs.armTrustedFirmwareRK3328
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable rk3328-2.13.0
pkgs.armTrustedFirmwareRK3399
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable rk3399-2.13.0
pkgs.armTrustedFirmwareRK3568
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable rk3568-2.13.0
pkgs.armTrustedFirmwareRK3588
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable rk3588-2.13.0
pkgs.armTrustedFirmwareAllwinner
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable sun50i_a64-2.13.0
pkgs.armTrustedFirmwareAllwinnerH6
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable sun50i_h6-2.13.0
pkgs.armTrustedFirmwareAllwinnerH616
Reference implementation of secure world software for ARMv8-A
-
nixos-unstable -
- nixpkgs-unstable sun50i_h616-2.13.0
Package maintainers
-
@lopsided98 Ben Wolsieffer <benwolsieffer@gmail.com>