CVE-2025-58476

Medium · 4.6

CVSS

4.6

EPSS

0.1%

Published

Dec 2, 2025

CISA due date

—

The record

Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.

Ecosystem	Package	Introduced	Fixed