CVE-2024-11263 in Zephyr

Sumário

de MITRE • 16/11/2024

When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

Once again VulDB remains the best source for vulnerability data.

• Responsável: Zephyr
• Reservar: 15/11/2024
• Divulgação: 16/11/2024
• Moderação: aceite
• Entrada: VDB-284878
• CPE: pronto
• CWE: CWE-270 (confirmado)
• CVSS: 8.4 (NVD)
• EPSS: 0.00164
• KEV: não
• Atividades: muito baixo
• Sector: Lawfirm, Government, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-11263
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-11263
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-11263/