CVE-2026-37540

Published: May 1, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (STM32MP1, Zynq, i.MX), large values can cause the product to wrap around to a small value.

Affected (1)

Products: Linaro: Openamp

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linaro Openamp	Version 2025.10.0

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (3)

https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381

Source: cve@mitre.org

Third Party Advisory

https://github.com/OpenAMP/open-amp

Source: cve@mitre.org

Product

https://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.c

Source: cve@mitre.org

Product

Timeline

No history available yet.