Skip to content
Fencer Vulns
high 7.6

CVE-2025-24857 json

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ401…

published 2025-12-10 10 mo ago modified 2026-11-04 4 d ago also EUVD-2025-202621

cvss
7.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 19%
public exploits
0
none known

Summary

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.

Patch / fix

  • denx u-boot 2017.11
  • u-boot Debian 14, Debian 13, Debian 12 2017.11+dfsg1-2

debian advisories DEBIAN-CVE-2025-24857

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-25-343-01 updated cvss 8.4

Universal Boot Loader (U-Boot) (Update A)

  • Johnson Controls Airwall AW-75 U-boot <2017.11
    affected: fixed in v2025.4, mitigation ftp.denx.de
  • Qualcomm Chipset IPQ4019 U-boot <2017.11 Qualcomm Chipset IPQ5018 U-boot <2017.11 Qualcomm Chipset IPQ5322 U-boot <2017.11 Qualcomm Chipset IPQ6018 U-boot <2017.11 Qualcomm Chipset IPQ8064 U-boot <2017.11 Qualcomm Chipset IPQ8074 U-boot <2017.11
    +1 more products
    Qualcomm Chipset IPQ9574 U-boot <2017.11
    affected: mitigation “Qualcomm recommends users with the affected chips to contact support referencing CVE-2025-24857, QPSIIR-1969 or CR4082905.” qualcomm.com
  • U-boot <2017.11
    affected: fixed in v2025.4 ftp.denx.de

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
10 mo ago

Exploit prediction

0.27% chance of exploitation in the next 30 days, higher than 19% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.6 CVSS:3.1/AC:L/AV:P/A:H/C:H/I:H/PR:N/S:C/UI:N
CNA 3.1 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.