CVE-2024-6563

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. This vulnerability is associated with program files https://github.Com/renesas-rcar/arm-trusted-firmware/blob/rcar_gen3_v2.5/drivers/renesas/common/io/i... https://github.Com/renesas-rcar/arm-trusted-firmware/blob/rcar_gen3_v2.5/drivers/renesas/common/io/io_rcar.C . In line 313 "addr_loaded_cnt" is checked not to be "CHECK_IMAGE_AREA_CNT" (5) or larger, this check does not halt the function. Immediately after (line 317) there will be an overflow in the buffer and the value of "dst" will be written to the area immediately after the buffer, which is "addr_loaded_cnt". This will allow an attacker to freely control the value of "addr_loaded_cnt" and thus control the destination of the write immediately after (line 318). The write in line 318 will then be fully controlled by said attacker, with whichever address and whichever value ("len") they desire.

• CWE-120
• CWE-123
• CWE-120

• https://asrg.io/security-advisories/cve-2024-6563/Third Party Advisory
• https://github.com/renesas-rcar/arm-trusted-firmware/commit/235f85b654a031f7647e81b86fc8e4ffeb430164Patch
• https://asrg.io/security-advisories/cve-2024-6563/Third Party Advisory
• https://github.com/renesas-rcar/arm-trusted-firmware/commit/235f85b654a031f7647e81b86fc8e4ffeb430164Patch

Published

Jul 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6556The SmartCrawl WordPress SEO checker, SEO analyzer, SEO opti…5.3
• CVE-2024-6557The SchedulePress – Auto Post & Publish, Auto Social Share, …5.3
• CVE-2024-6558HMS Industrial Networks Anybus-CompactCom 30 products are v…6.1
• CVE-2024-6559The Backup, Restore and Migrate WordPress Sites With the XCl…5.3
• CVE-2024-6560The Addonify – Quick View For WooCommerce plugin for WordPre…5.3
• CVE-2024-6562The affiliate-toolkit – WordPress Affiliate Plugin plugin fo…5.3
• CVE-2024-6564Buffer overflow in "rcar_dev_init" due to using due to usin…6.7
• CVE-2024-6565The AForms — Form Builder for Price Calculator & Cost Estima…5.3
• CVE-2024-6566The Aramex Shipping WooCommerce plugin for WordPress is vuln…5.3
• CVE-2024-6567The Ebook Store plugin for WordPress is vulnerable to Full P…5.3
• CVE-2024-6568The Flamix: Bitrix24 and Contact Form 7 integrations plugin …5.3
• CVE-2024-6569The Campaign Monitor for WordPress plugin for WordPress is v…5.3