PT-2024-30934 · T Head · T-Head Xuantie C910+1

Daniel Weber + 5 · Published 2024-08-18 · Updated 2024-08-23 · CVE-2024-44067

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions T-Head XuanTie C910 CPU in the TH1520 SoC (affected versions not specified) T-Head XuanTie C920 CPU in the SOPHON SG2042 (affected versions not specified)

Description The issue allows unprivileged attackers to write to arbitrary physical memory locations. This is due to certain instructions in the T-Head XuanTie C910 CPU and the T-Head XuanTie C920 CPU. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-123

CWE-119

Related Identifiers

CVE-2024-44067

Affected Products

T-Head Xuantie C910

T-Head Xuantie C920

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-44067 · Security Note
• https://t.me/cvenotify/91087 · Telegram Post
• https://twitter.com/CVEnew/status/1825356126470168661 · Twitter Post
• https://twitter.com/CveFindCom/status/1827005574757704177 · Twitter Post
• https://twitter.com/cracbot/status/1826862031666119155 · Twitter Post
• https://ghostwriteattack.com · Note
• https://twitter.com/VulmonFeeds/status/1825408382691401913 · Twitter Post
• https://twitter.com/cracbot/status/1827224372912042402 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1825363537440768454 · Twitter Post
• https://t.me/cvedetector/3502 · Telegram Post