PT-2025-50492 · Qualcomm+1 · Ipq5322+7

Published 2025-12-10 · Updated 2026-01-21 · CVE-2025-24857

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Universal Boot Loader (U-Boot) versions prior to 2017.11 Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574

Description An issue exists with access control for volatile memory that contains boot code. This could allow an attacker to execute arbitrary code.

Recommendations Update Universal Boot Loader to version 2017.11 or later. Update Qualcomm chips to a version that addresses this issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-24857

Affected Products

Ipq4019

Ipq5018

Ipq5322

Ipq6018

Ipq8064

Ipq8074

Ipq9574

Universal Boot Loader

References · 11

• https://ubuntu.com/security/CVE-2025-24857 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24857 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24857 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-24857 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-24857 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-24857 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-24857 · Vendor Advisory
• https://t.me/cveNotify/149435 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-343-01 · Note
• https://twitter.com/CVEnew/status/2000248646894506087 · Twitter Post
• https://t.me/cveNotify/146703 · Telegram Post