OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (STM32MP1, Zynq, i.MX), large values can cause the product to wrap around to a small value.
References
| Link | Resource |
|---|---|
| https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381 | Third Party Advisory |
| https://github.com/OpenAMP/open-amp | Product |
| https://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.c | Product |
Configurations
History
29 May 2026, 12:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:linaro:openamp:2025.10.0:*:*:*:*:*:*:* | |
| First Time |
Linaro
Linaro openamp |
|
| References | () https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381 - Third Party Advisory | |
| References | () https://github.com/OpenAMP/open-amp - Product | |
| References | () https://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.c - Product |
01 May 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-190 |
01 May 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-01 17:16
Updated : 2026-05-29 12:39
NVD link : CVE-2026-37540
Mitre link : CVE-2026-37540
CVE.ORG link : CVE-2026-37540
JSON object : View
Products Affected
linaro
- openamp
CWE
CWE-190
Integer Overflow or Wraparound