CVE-2025-24857

High · 7.6

CVSS

7.6

EPSS

0.3%

Published

Dec 10, 2025

CISA due date

—

The record

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.

Affected packages

Ecosystem	Package	Introduced	Fixed