CVE-2026-37540 — HIGH (8.4)

Vulnerability Description

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (STM32MP1, Zynq, i.MX), large values can cause the product to wrap around to a small value.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Linaro	Openamp	2025.10.0

Related Weaknesses (CWE)

CWE-190

References

https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381Third Party Advisory
https://github.com/OpenAMP/open-ampProduct
https://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.cProduct

FAQ

What is CVE-2026-37540?

CVE-2026-37540 is a vulnerability with a CVSS score of 8.4 (HIGH). OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF he...

How severe is CVE-2026-37540?

CVE-2026-37540 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-37540?

Check the references section above for vendor advisories and patch information. Affected products include: Linaro Openamp.