CVE-2026-37540 - OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing

Back Back to CVE browser

CRITICAL

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing

Published May 1, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.45%

Description

OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (STM32MP1, Zynq, i.MX), large values can cause the product to wrap around to a small value.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26693
Advisory
https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381
Third Party Advisory
https://github.com/OpenAMP/open-amp
Product
https://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.c
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26693		Advisory
https://gist.github.com/sgInnora/f4ac66faeefe07a653ceeb3f58cdc381		Third Party Advisory
https://github.com/OpenAMP/open-amp		Product
https://github.com/OpenAMP/open-amp/blob/main/lib/remoteproc/elf_loader.c		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 1, 2026

Updated May 1, 2026

Reserved Apr 6, 2026

Link CVE-2026-37540

CISA Vulnrichment

Updated May 1, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-37540

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 1, 2026

Updated May 1, 2026

Link EUVD-2026-26693

GitHub

No data