OpenAMP v2025.10.0 contains an integer overflow in the ELF loader, where the loader multiplies two 16‑bit values from an ELF header without checking for overflow. When the product exceeds the 32‑bit limit on systems such as STM32MP1, Zynq, and i.MX, the value wraps around to a smaller number. This flaw can enable an attacker to craft a malicious firmware image that is parsed incorrectly, potentially leading to unintended behavior or execution of unauthorized code.

OpenAMP v2025.10.0 on 32‑bit embedded platforms including STM32MP1, Zynq, and i.MX. The vulnerability affects the elf_loader component used for firmware image parsing.

The CVSS score of 8.4 indicates high severity. EPSS is not available, and the vulnerability is not listed in CISA KEV, but the lack of a published exploit does not diminish the risk. Exploitation requires the attacker to supply a crafted ELF file, so the likely attack vector is local or during firmware deployment. Once the malformed header is processed, integer overflow causes incorrect parsing which may be abused to execute arbitrary code or cause a denial of service.