CVE-2025-47382CWE-863

Incorrect Authorization in Boot

High · published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.4
In the wild
Unconfirmed
What it is

⚡ A sneaky memory corruption flaw in the boot loader can crash your system just by loading invalid firmware! 🚨 Think of it like a restaurant accepting a reservation for a dish that doesn’t exist — when the chef tries to prepare it, chaos ensues in the kitchen! An attacker can exploit this memory corruption to crash the system, causing it to become unresponsive or, in the worst case, render the device inoperable. This could lead to downtime and loss of critical functionality, leaving users frustrated and vulnerable.

Put simply

Think of it like a restaurant accepting a reservation for a dish that doesn’t exist — when the chef tries to prepare it, chaos ensues in the kitchen! CVE-2025-47382 allows for memory corruption by improperly handling invalid firmware input in a boot loader, which results in potential system crashes or unauthorized access to system resources.

What to do

An attacker can exploit this memory corruption to crash the system, causing it to become unresponsive or, in the worst case, render the device inoperable. This could lead to downtime and loss of critical functionality, leaving users frustrated and vulnerable. First, ensure your boot loader is updated to the latest version that addresses this vulnerability. Review firmware validation processes to prevent loading invalid firmware in the future and conduct thorough testing before deployment. 🛡️ You've got this! By taking these steps, you’ll strengthen your defenses and keep your systems running smoothly! 💪✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00088 · 0.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-12-18T05:29Z
EPSS history
Timeline
  • 18 DEC 05:29Z
    Incorrect Authorization in Boot
    cvelistv5