CVE-2024-6285: Renesas Rcar GEN3

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Integer Underflow (Wrap or Wraparound) vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses.

Affected products

• Renesas Rcar GEN3: version v2.5 only

Published 2024-06-24. Last modified 2026-06-17.