Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Jan 2026, 19:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01 - Third Party Advisory, US Government Resource | |
| First Time |
Denx u-boot
Qualcomm ipq4019 Qualcomm ipq9574 Qualcomm ipq6018 Qualcomm Qualcomm ipq8074 Qualcomm ipq8064 Qualcomm ipq5322 Qualcomm ipq5018 Denx |
|
| CPE | cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq5322:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq9574:-:*:*:*:*:*:*:* |
23 Dec 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
10 Dec 2025, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-10 21:16
Updated : 2026-01-21 19:14
NVD link : CVE-2025-24857
Mitre link : CVE-2025-24857
CVE.ORG link : CVE-2025-24857
JSON object : View
Products Affected
qualcomm
- ipq5322
- ipq9574
- ipq4019
- ipq8064
- ipq6018
- ipq8074
- ipq5018
denx
- u-boot
CWE
CWE-284
Improper Access Control