Every CVE Search/ Get API key

CVE-2025-45512

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U...

6.5 MediumPublic exploit

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.36%Up 0.3 points since Aug 6, 2025
90%50%10%1%

What each source reports

CVE List Score used 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
CVE-2025-45512
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-77
Updated
2026-11-02
EUVDEUVD-2025-23651 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
EUVD-2025-23651
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-xw32-c3jc-v6qh 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U...

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
GHSA-xw32-c3jc-v6qh
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-77
Updated
2026-11-02
NVD 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
CVE-2025-45512
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-77
Updated
2026-11-02
OSV 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
CVE-2025-45512
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2025-45512 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
DEBIAN-CVE-2025-45512
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2025-45512 6.5

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.

Record
UBUNTU-CVE-2025-45512
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
u-boot
Debian:12
 All versions, plus listed versions
2023.01+dfsg-22023.01+dfsg-2+deb12u12023.01+dfsg-2+deb12u22023.01+dfsg-2+deb12u32023.04+dfsg-1
Show 19 moreShow less
2023.04~rc2+dfsg-12023.04~rc5+dfsg-12023.07+dfsg-12023.07~rc4+dfsg-12023.07~rc5+dfsg-12024.01+dfsg-12024.01+dfsg-22024.01+dfsg-32024.01+dfsg-42024.01+dfsg-52024.01+dfsg-62024.01+dfsg-72024.01~rc6+dfsg-12024.01~rc6+dfsg-22025.01-12025.01-22025.01-32025.01-3.12025.01-3.2
 None known
u-boot
Debian:13
 All versions, plus listed versions
2025.01-32025.01-3+deb13u12025.01-3.12025.01-3.2
 None known
u-boot
Debian:14
 All versions, plus listed versions
2025.01-32025.01-3.12025.01-3.2
 None known
u-boot
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2015.04+dfsg1-2ubuntu12015.10+dfsg1-22015.10+dfsg1-32015.10+dfsg1-42016.01+dfsg1-1
Show 7 moreShow less
2016.01+dfsg1-1ubuntu12016.01+dfsg1-2ubuntu12016.01+dfsg1-2ubuntu22016.01+dfsg1-2ubuntu32016.01+dfsg1-2ubuntu52016.01+dfsg1-2ubuntu5+esm12016.01+dfsg1-2ubuntu5+esm2
 None known
u-boot
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2016.03+dfsg1-6ubuntu22018.07~rc3+dfsg1-0ubuntu1~18.04.12018.07~rc3+dfsg1-0ubuntu2~18.04.12018.07~rc3+dfsg1-0ubuntu3~18.04.12019.07+dfsg-1ubuntu4~18.04.1
Show 4 moreShow less
2020.10+dfsg-1ubuntu0~18.04.22020.10+dfsg-1ubuntu0~18.04.32020.10+dfsg-1ubuntu0~18.04.3+esm12020.10+dfsg-1ubuntu0~18.04.3+esm2
 None known
u-boot
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2019.07+dfsg-1ubuntu32019.07+dfsg-1ubuntu52019.07+dfsg-1ubuntu62020.10+dfsg-1ubuntu0~20.04.22021.01+dfsg-3ubuntu0~20.04.1
Show 6 moreShow less
2021.01+dfsg-3ubuntu0~20.04.32021.01+dfsg-3ubuntu0~20.04.42021.01+dfsg-3ubuntu0~20.04.52021.01+dfsg-3ubuntu0~20.04.62021.01+dfsg-3ubuntu0~20.04.6+esm12021.01+dfsg-3ubuntu0~20.04.6+esm2
 None known
u-boot
Ubuntu:22.04:LTS
 All versions, plus listed versions
2021.07+dfsg-0ubuntu82021.07+dfsg-0ubuntu92021.07+dfsg-0ubuntu102022.01+dfsg-2ubuntu12022.01+dfsg-2ubuntu2
Show 8 moreShow less
2022.01+dfsg-2ubuntu2.12022.01+dfsg-2ubuntu2.32022.01+dfsg-2ubuntu2.42022.01+dfsg-2ubuntu2.52022.01+dfsg-2ubuntu2.62022.01+dfsg-2ubuntu2.72022.01+dfsg-2ubuntu2.82022.01+dfsg-2ubuntu2.9
 None known
u-boot-nezha
Ubuntu:22.04:LTS
 All versions, plus listed versions
2021.09+git20211008.62392d3-0ubuntu12022.04+git20220405.7446a472-0ubuntu0.12022.04+git20220405.7446a472-0ubuntu0.22022.04+git20220405.7446a472-0ubuntu0.32022.04+git20220405.7446a472-0ubuntu0.4
 None known
u-boot
Ubuntu:24.04:LTS
 All versions, plus listed versions
2023.07+dfsg-1ubuntu22024.01+dfsg-1ubuntu12024.01+dfsg-1ubuntu22024.01+dfsg-1ubuntu32024.01+dfsg-1ubuntu4
Show 9 moreShow less
2024.01+dfsg-1ubuntu52024.01+dfsg-1ubuntu5.12024.01+dfsg-1ubuntu5.22025.01-0ubuntu0.24.04.12025.01-0ubuntu0.24.04.22025.10-0ubuntu0.24.04.12025.10-0ubuntu0.24.04.22025.10-0ubuntu0.24.04.32025.10-0ubuntu0.24.04.4
 None known
u-boot-nezha
Ubuntu:24.04:LTS
 All versions, plus listed versions
2022.10-1089-g528ae9bc6c-0ubuntu22024.01~rc1-190-g2e89b706f5-0ubuntu12024.01~rc1-190-g2e89b706f5-0ubuntu22024.01~rc1-190-g2e89b706f5-0ubuntu2.24.04.2
 None known
u-boot
Ubuntu:25.10
 All versions, plus listed versions
2025.01-1~0ubuntu22025.01-3ubuntu12025.01-3ubuntu22025.01-3ubuntu42025.10-0ubuntu0.25.10.1
 None known
u-boot
Ubuntu:26.10
 All versions, plus listed versions
2025.10-0ubuntu22025.10-0ubuntu32025.10-0ubuntu42025.10-0ubuntu52025.10-0ubuntu6
 None known
u-boot
Ubuntu:26.04:LTS
 All versions, plus listed versions
2025.01-3ubuntu42025.10-0ubuntu12025.10-0ubuntu22025.10-0ubuntu2.12025.10-0ubuntu2.2
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubAzhariRamadhan/CVE-2025-455122025-03-28

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-45512 is a medium vulnerability (CVSS 6.5) in Denx U-boot, published August 5, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open