PT-2024-37720 · Renesas+1 · R-Car Gen3+1

Tomer Fichman · Published 2024-07-08 · Updated 2024-08-22 · CVE-2024-6564

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Renesas R-Car Gen3 versions (affected versions not specified)

Description The issue is caused by a buffer overflow in the rcar dev init function due to the use of untrusted data (rcar image number) as a loop counter before verifying it against RCAR MAX BL3X IMAGE. This could lead to a full bypass of secure boot.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2024-6564

OESA-2024-1848

OESA-2024-1849

OESA-2024-1850

OESA-2024-1851

Affected Products

Debian

R-Car Gen3

References · 22

• https://github.com/renesas-rcar/arm-trusted-firmware/commit/c9fb3558410032d2660c7f3b7d4b87dec09fe2f2 · Patch
• https://osv.dev/vulnerability/OESA-2024-1849 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-6564 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1851 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-6564 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1850 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1848 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-6564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6563 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6564 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-6564 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6564 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-6564 · Vendor Advisory
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1851 · Note
• https://asrg.io/security-advisories/cve-2024-6564 · Note