CVE-2025-45512

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/AzhariRamadhan/a5c9644861f46b1eadb1f2a15c7950feExploit, Third Party Advisory
https://github.com/AzhariRamadhan/uboot-cveExploit, Third Party Advisory

Timeline

Published: Aug 5, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-455139.8Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.P2pListFilter.CVE-2025-455146.5Tenda FH451 V1.0.0.9 has a stack overflow vulnerability in the function.frmL7ImForm.CVE-2025-45528.1A vulnerability has been found in ContiNew Admin up to 3.6.0 and classified as problematic. Affected by this vulnerability is an unknown fun CVE-2025-455252.9A NULL pointer dereference vulnerability has been identified in the JavaScript library microlight version 0.0.7, a lightweight syntax highli CVE-2025-455262.9A denial of service (DoS) vulnerability has been identified in the JavaScript library microlight version 0.0.7. This library, used for synta CVE-2025-455287.3An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF CVE-2025-455297.1An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sendi CVE-2025-45539.8A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some CVE-2025-45549.8A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. This affects an unknow CVE-2025-455427.3SQL injection vulnerability in the registrationform endpoint of CloudClassroom-PHP-Project v1.0. The pass parameter is vulnerable due to imp CVE-2025-45559.8The web management interface of Okcat Parking Management Platform from ZONG YU has a Missing Authentication vulnerability, allowing unauthen CVE-2025-45569.8The web management interface of Okcat Parking Management Platform from ZONG YU has an Arbitrary File Upload vulnerability, allowing unauthen