Smartbond Da14695

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:renesas:smartbond_da14695:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorRenesas (dfaafd55-b297-586e-b685-769afc34b58f)
ProductSmartbond Da14695 (ebb91aab-0fde-53c4-a5ec-4f9b84271091)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25077 vulnerable 2026-06-03 14:55:06.354038 Details available
An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The Nonce used for on-the-fly decryption of flash images is stored in an unsigned header, allowing its value to be modified without invalidating the signature used for secureboot image verification. Because the encryption engine for on-the-fly decryption uses AES in CTR mode without authentication, an attacker-modified Nonce can result in execution of arbitrary code.
Published: 2024-07-10T00:00:00.000Z
Updated: 2024-08-08T14:03:31.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25076 vulnerable 2026-06-03 14:55:06.353526 Details available
An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function responsible for validating the Flash Product Header directly uses a user-controllable size value (Length of Flash Config Section) to control a read from the QSPI device into a fixed sized buffer, resulting in a buffer overflow and execution of arbitrary code.
Published: 2024-07-10T00:00:00.000Z
Updated: 2024-08-01T23:36:21.276Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.