14725 matches found
CVE-2025-24857: Improper Access Control
Improper access control for volatile memory containing boot code in Universal Boot Loader U-Boot before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code...
PT-2025-50492
Name of the Vulnerable Software and Affected Versions Universal Boot Loader U-Boot versions prior to 2017.11 Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 Description An issue exists with access control for volatile memory that contains boot code. This could all...
CVE-2025-24857
The vulnerability CVE-2025-24857 affects Universal Boot Loader (U-Boot) versions prior to 2017.11 and certain Qualcomm boot ROM/SoC families (IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, IPQ9574). The root cause is improper access control for volatile memory containing boot code, which c...
CVE-2025-24857
Improper access control for volatile memory containing boot code in Universal Boot Loader U-Boot before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code...
CVE-2025-65829
The ESP32 system on a chip SoC that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved ...
CVE-2025-65829: Improper Control of Generation of Code
The ESP32 system on a chip SoC that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved ...
CVE-2025-24857
Improper access control for volatile memory containing boot code in Universal Boot Loader U-Boot before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code...
Meatmeet Pro BBQ Thermometer has a security vulnerability
Meatmeet Pro BBQ Thermometer is an advanced smart thermometer from Meatmeet. A security vulnerability exists in Meatmeet Pro BBQ Thermometer version v1.0.34.4, which stems from the lack of Secure Boot functionality and could lead to malicious code execution...
CVE-2025-2296 Un-verified kernel bypass Secure Boot mechanism in direct boot mode
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...
CVE-2025-2296 Un-verified kernel bypass Secure Boot mechanism in direct boot mode
EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...
CVE-2025-2296
CVE-2025-2296 affects EDK2 BIOS/edk2 components. The connected docs indicate a vulnerability in improper input validation that could allow arbitrary command execution and impact confidentiality, integrity, and availability, with local access required. Mitigations shown include patch/updated packa...
CISA Releases Three Industrial Control Systems Advisories
CISA released three Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-343-01 Universal Boot Loader U-Boot ICSA-25-343-02 Festo LX Appliance ICSA-25-343-03 Multiple India-Base...
November 11, 2025—KB5068791 (OS Build 17763.8027)
None None...
November 11, 2025—KB5068787 (OS Build 20348.4405)
None None...
November 11, 2025—KB5068781 (OS Builds 19044.6575 and 19045.6575)
None None...
November 11, 2025—KB5068779 (OS Build 25398.1965)
None None...
December 9, 2025—Hotpatch KB5071413 (OS Build 20348.4467)
None None...
December 9, 2025—KB5071547 (OS Build 20348.4529)
None None...