CVE-2025-14859 Semtech LR11xx Secure Boot Bypass
Attackers with physical access can bypass secure boot via hash collisions to install malicious firmware on Semtech LR11xx LoRa transceivers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-14859?
CVE-2025-14859 is a high-severity vulnerability in Semtech LR1110, published on 7 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware. However, the implementation uses a non-standard cryptographic hashing algorithm that is vulnerable to second preimage attacks. An attacker with physical access to the device can exploit this weakness to generate a malicious firmware image with a hash collision, bypassing the secure boot verification mechanism and installing arbitrary unauthorized firmware on the device.
Weakness: CWE-327
Which versions are affected by CVE-2025-14859?
How do I fix CVE-2025-14859?
No fix has been published for CVE-2025-14859 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-14859 being exploited?
There is no known exploitation of CVE-2025-14859 in the wild and no public exploit code.
Sources
Also known as GHSA-v47h-jj44-7gh5.