Renesas rcar_gen3 2.5 Image bl2_mem_params_descs integer overflow

Summaryinfo

A vulnerability categorized as problematic has been discovered in Renesas rcar_gen3 2.5. This affects the function bl2_mem_params_descs of the component Image Handler. Such manipulation leads to integer overflow. This vulnerability is listed as CVE-2024-1633. The attack can be executed directly on the physical device. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Renesas rcar_gen3 2.5. Affected by this issue is the function bl2_mem_params_descs of the component Image Handler. The manipulation with an unknown input leads to a integer overflow vulnerability. Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impacted is integrity. CVE summarizes:

During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”. For each image, the bl2 reads the image length and destination from the image’s certificate. Because of the way of reading from the image, which base on 32-bit unsigned integer value, it can result to an integer overflow. An attacker can bypass memory range restriction and write data out of buffer bounds, which could result in bypass of secure boot. Affected git version from c2f286820471ed276c57e603762bd831873e5a17 until (not 

The weakness was presented 02/19/2024. The advisory is shared for download at asrg.io. This vulnerability is handled as CVE-2024-1633. There are known technical details, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Renesas

Name

• rcar_gen3

Version

• 2.5

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion