7.6

CVE-2025-24857

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Denx ≫ U-boot Version < 2017.11
   Qualcomm ≫ Ipq4019 Version-
   Qualcomm ≫ Ipq5018 Version-
   Qualcomm ≫ Ipq5322 Version-
   Qualcomm ≫ Ipq6018 Version-
   Qualcomm ≫ Ipq8064 Version-
   Qualcomm ≫ Ipq8074 Version-
   Qualcomm ≫ Ipq9574 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.03% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cve@mitre.org 7.6 0.9 6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01
Third Party Advisory
US Government Resource