High severity7.6OSV Advisory· Published Dec 10, 2025· Updated Jun 17, 2026

CVE-2025-24857

Description

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

U Boot/U BootOSV
Range: LABEL_2002_11_05_0120, LABEL_2002_11_05_1735, LABEL_2002_11_10_2310, …
Denx/U Boot
cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*
Range: <2017.11
Universal Boot Loader/U-Bootllm-create
Range: <2017.11
Qualcomm/IPQ5018llm-fuzzy
Qualcomm/IPQ4019llm-fuzzy

Patches

Vulnerability mechanics

References

www.cisa.gov/news-events/ics-advisories/icsa-25-343-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000