CVE-2024-4760

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, and SAM 3S/3N/3U microcontrollers allows access to the memory bus via the debug interface even if the security bit is set.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1247

Affected software

Vendor	Product	Versions
Microchip	SAME70	0
Microchip	SAMS70	0
Microchip	SAMV70	0
Microchip	SAMV71	0
Microchip	SAMG55	0
Microchip	SAM4C	0
Microchip	SAM4S	0
Microchip	SAM4N	0
Microchip	SAM4E	0
Microchip	SAM3S	0
Microchip	SAM3N	0
Microchip	SAM3U	0
amtel	same70	*
amtel	sams70	*
amtel	samv70	*
amtel	samv71	*

References

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-476009.1GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been detected in the format_chann CVE-2024-476017.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in CVE-2024-476027.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in CVE-2024-476037.5GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in CVE-2024-476046.1NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handling of HTML element a CVE-2024-476055.4silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmb CVE-2024-476069.8GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_CVE-2024-476079.8GStreamer is a library for constructing graphs of media-handling components. stack-buffer overflow has been detected in the gst_opus_dec_pa CVE-2024-476089.8Logicytics is designed to harvest and collect data for forensic analysis. Logicytics has a basic vuln affecting compromised devices from she CVE-2024-476096.9Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server there is a remote DoS at CVE-2024-47618.8Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a CVE-2024-476105.4InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a registered user to store jav