CVE-2025-38428

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The ims pcu flash firmware() function does not adequately validate the size of data received from firmware before copying it into memory using memcpy(). The len variable, originating from the firmware, is used directly in the memcpy() operation without sufficient bounds checking. A large value for len could lead to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.