Unrated
Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018,...
CVE-2025-24857
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-24857 u-boot Fixed in: 2017.11+dfsg1-2
- Ubuntu UBUNTU-CVE-2025-24857 boot
Original description The description as published by the source.
Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory cisa.gov