Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (STM32MP1, Zynq, i.MX), large values can cause the product to wrap around to a small value.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-37540 OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-contro… https://www.cve.org/CVERecord?id=CVE-2026-37540
Post summary
The post announces CVE-2026-37540, describing an integer overflow in OpenAMP’s ELF loader during firmware parsing, without evidence of exploitation or available patches.
🚨*CVE* CVE-2026-37540 OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-contro… https://www.cve.org/CVERecord?id=CVE-2026-37540 ----- Traducción: CVE-2026-37540 Ope… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑37540, describing it as an integer‑overflow issue in the OpenAMP ELF loader, but provides no PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | linaro | openamp | 2025.10.0 | - | - |