{"id":"CVE-2024-9413","aliases":["EUVD-2024-49925","GHSA-556r-96q6-ppp2"],"status":"published","title":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not...","description":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00398,"percentile":0.34522,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-755"],"published":"2024-11-13T16:09:26Z","modified":"2026-06-17T08:24:31Z","products":[{"vendor":"arm","product":"scp-firmware"},{"vendor":"arm","product":"scp_firmware"}],"references":[{"url":"https://developer.arm.com/Arm%20Security%20Center/SCP-Firmware%20Vulnerability","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9413"},{"url":"https://github.com/advisories/GHSA-556r-96q6-ppp2"}],"sources":{"cve":[{"id":"CVE-2024-9413","description":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.","status":"published","published":"2024-11-13T16:09:26.331Z","modified":"2024-11-27T15:35:14.153Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:34:06.147811Z"}],"euvd":[{"id":"EUVD-2024-49925","description":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.","status":"published","published":"2024-11-13T16:09:26Z","modified":"2024-11-27T15:35:14Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:45.657538Z"}],"ghsa":[{"id":"GHSA-556r-96q6-ppp2","title":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not...","description":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.","status":"published","published":"2024-11-13T18:32:04Z","modified":"2024-11-27T18:35:03Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:58:58.77666Z"}],"nvd":[{"id":"CVE-2024-9413","description":"The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application Processor (AP) to cause a buffer overflow in System Control Processor (SCP) firmware.","status":"published","published":"2024-11-13T17:15:12.66Z","modified":"2026-06-17T08:24:31.567Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:10:37.281254Z"}]}}