CVE-2024-6285
CVE-2024-6285 · Integer Underflow in Memory Range Check in Renesas RCAR
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.
CVSS 7.5 · High · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
rcar_gen3_v2.5
- Versions
- ≥ c2f286820471ed276c57e603762bd831873e5a17, < b596f580637bae919b0ac3a5471422a1f756db3b: Affected; ≥ b596f580637bae919b0ac3a5471422a1f756db3b: Not affected (git)
No fix published
arm-trusted-firmware Debian:12
- Versions
- 2.10.0+dfsg-1
- 2.10.10+dfsg-1
- 2.12.0+dfsg-1
- 2.12.0+dfsg-2
- 2.12.1+dfsg-1
- 2.8.0+dfsg-1
- 2.9.0+dfsg-1
- 2.9.0+dfsg-2
- 2.9.0+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Debian:13
- Versions
- 2.12.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Debian:14
- Versions
- 2.12.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Ubuntu:20.04:LTS
- Versions
- 2.1-3
- 2.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Ubuntu:22.04:LTS
- Versions
- 2.5+dfsg-1
- 2.6+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Ubuntu:24.04:LTS
- Versions
- 2.9.0+dfsg-3
- 2.10.0+dfsg-1
- 2.10.0+dfsg-1build1
- 2.10.0+dfsg-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Ubuntu:25.10
- Versions
- 2.10.0+dfsg-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Ubuntu:26.10
- Versions
- 2.12.1+dfsg-1
- 2.12.1+dfsg-1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
arm-trusted-firmware Ubuntu:26.04:LTS
- Versions
- 2.10.0+dfsg-1build2
- 2.12.1+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published