I
mproper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Jan 2026, 19:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01 - Third Party Advisory, US Government Resource | |
| CPE | cpe:2.3:h:qualcomm:ipq5322:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq9574:-:*:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:* cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:* |
|
| First Time |
Qualcomm ipq6018
Qualcomm ipq8064 Denx Qualcomm ipq5322 Qualcomm Qualcomm ipq8074 Qualcomm ipq4019 Qualcomm ipq5018 Denx u-boot Qualcomm ipq9574 |
23 Dec 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
12 Dec 2025, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-10 21:16
Updated : 2026-01-21 19:14
NVD link : CVE-2025-24857
Mitre link : CVE-2025-24857
CVE.ORG link : CVE-2025-24857
JSON object : View
CWE
CWE-284
Improper Access Control