Linaro vulnerabilities
We track 3 vulnerabilities in Linaro products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 1, 2026.
Latest Linaro vulnerabilities
- 9.8 Critical severity
Openamp: Integer Overflow or Wraparound
OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. In elf_loader.c, it performs multiplication of two attacker-controlled 16-bit values from the ELF header without overflow checking. On 32-bit embedded systems (
- 9.8 Critical severity
Lava: Improper Control of Generation of Code
In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configuration files in lava-server loads input as a Jinja2 template i
- 8.8 High severity
Lava: Improper Control of Generation of Code
In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on th