Amazon Element55 unpacks CVE-2025-24857, a severe flaw they discovered in U-Boot’s FAT filesystem support that exposes unauthorized code execution. This talk will elucidate the requisite lore of our research and methodology, how Amazon responded internally, and the coordinated disclosure process.