Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Renesas Component: Arm-trusted-firmware Clear all filters
TI-2024-06086 CVE-2024-6564 · GHSA-4f2h-f89q-3w95

Buffer overflow in Rensas RCAR

Priority LOW 31

Buffer overflow in "rcar_dev_init" due to using due to using untrusted data (rcar_image_number) as a loop counter before verifying it against RCAR_MAX_BL3X_IMAGE.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00223 Published 2024-07-08 No fix listed CWE-120
TI-2024-06085 CVE-2024-6563 · GHSA-5mvx-hm4v-mrqg

Buffer overflow arbitrary write in Renesas rcar_gen3_v2.5

Priority LOW 34

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00211 Published 2024-07-08 No fix listed CWE-120
TI-2024-01516 CVE-2024-1633 · GHSA-wj7c-h9x2-w8cg

FIP Header Integer Overflow

Priority LOW 10

During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”.

CVSS 3.1LOW 2.0 Physical No auth No interaction EPSS 0.00144 Published 2024-02-19 No fix listed CWE-190