DEBIAN-CVE-2024-6287

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/DEBIAN-CVE-2024-6287

Import Source

https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-6287.json

JSON Data

https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-6287

Upstream

CVE-2024-6287

Published

2024-06-24T16:15:11Z

Modified

2025-09-18T05:18:08Z

Summary

[none]

Details

Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whether a new image invades/overlaps with a previously loaded image the code neglects to consider a few cases. that could An attacker to bypass memory range restriction and overwrite an already loaded image partly or completely, which could result in code execution and bypass of secure boot.

References

https://security-tracker.debian.org/tracker/CVE-2024-6287

Affected packages

Debian:11 / arm-trusted-firmware

Package

Name: arm-trusted-firmware
Purl: pkg:deb/debian/arm-trusted-firmware?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / arm-trusted-firmware

Package

Name: arm-trusted-firmware
Purl: pkg:deb/debian/arm-trusted-firmware?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / arm-trusted-firmware

Package

Name: arm-trusted-firmware
Purl: pkg:deb/debian/arm-trusted-firmware?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:14 / arm-trusted-firmware

Package

Name: arm-trusted-firmware
Purl: pkg:deb/debian/arm-trusted-firmware?arch=source

Affected ranges

Ecosystem specific

{
    "urgency": "unimportant"
}