CVE Intelligence

Linuxfoundation Yocto vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Linuxfoundation Yocto: 6 record(s), with affected versions and fixes.
cpe:2.3:a:linuxfoundation:yocto

CVE-2025-61611 High · 7.5 CWE-20 Mar 9, 2026
Improper Input Validation in Linuxfoundation Yocto
In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed..
CVE-2026-20435 Medium · 4.6 CWE-522 Mar 2, 2026
Insufficiently Protected Credentials in Linuxfoundation Yocto
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.
CVE-2025-20765 Medium · 4.7 CWE-362 Dec 2, 2025
Race Condition in Linuxfoundation Yocto
In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.
CVE-2025-20747 Medium · 6.7 CWE-787 Nov 4, 2025
Out-of-bounds Write in Linuxfoundation Yocto
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.
CVE-2025-20746 Medium · 6.7 CWE-787 Nov 4, 2025
Out-of-bounds Write in Linuxfoundation Yocto
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.
CVE-2025-20730 Medium · 6.7 CWE-287 Nov 4, 2025
Improper Authentication in Linuxfoundation Yocto
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.