{"id":"CVE-2024-6285","summary":"Integer Underflow in Memory Range Check in Renesas RCAR","details":"Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware.\nAn integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.","modified":"2026-08-12T15:16:10.614532Z","published":"2024-06-24T15:32:13.776Z","database_specific":{"cna_assigner":"ASRG","cwe_ids":["CWE-191"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6285.json","unresolved_ranges":[{"extracted_events":[{"introduced":"c2f286820471ed276c57e603762bd831873e5a17"},{"fixed":"b596f580637bae919b0ac3a5471422a1f756db3b"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"ADVISORY","url":"https://asrg.io/security-advisories/cve-2024-6285/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6285.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6285"},{"type":"FIX","url":"https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b"},{"type":"PACKAGE","url":"https://github.com/renesas-rcar/arm-trusted-firmware"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/renesas-rcar/arm-trusted-firmware","events":[{"introduced":"0"},{"fixed":"b596f580637bae919b0ac3a5471422a1f756db3b"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-6285.json","vanir_signatures_modified":"2026-08-12T15:16:10Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b","target":{"file":"drivers/renesas/common/io/io_rcar.c"},"deprecated":false,"digest":{"line_hashes":["167545474265535815709469781345846274975","83672508553065906885160285310470229070","192449489686858836217356063237994548850","44563517852321594524543286850430926918","107636787740302120215243284208098469223","244833072605430231046001163781989143690","58933159413703032944791521093473852621","286653017787239719823438752341224643558"],"threshold":0.9},"id":"CVE-2024-6285-d6e96990","signature_type":"Line"},{"id":"CVE-2024-6285-d9121ddb","signature_type":"Function","signature_version":"v1","source":"https://github.com/renesas-rcar/arm-trusted-firmware/commit/b596f580637bae919b0ac3a5471422a1f756db3b","target":{"file":"drivers/renesas/common/io/io_rcar.c","function":"check_load_area"},"deprecated":false,"digest":{"function_hash":"117185750020082507362494084268299919491","length":881}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H"}]}