Skip to content
OpenAdvisories
High · 8.0 CVE-2024-9413 EUVD-2024-49925GHSA-556r-96q6-ppp2

The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing…

Published Nov 13, 2024 · Updated Nov 27, 2024 · Assigned by Arm

Description

The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.

Affected products

VendorProductAffectedFixed
Arm SCP-Firmware 2.11.0 – ≤ 2.15.0 —

References