Openwrt vulnerabilities
Published CVEs affecting Openwrt products: 63 record(s), with severity, exploitation and fixes.
Openwrt 46Luci 13Odhcpd 1Luci-proto-openvpn 1Luci-app-tailscale-community 1Luci-app-travelmate 1Travelmate 1Luci-app-banip 1Luci-app-adblock-fast 1
CVE-2025-20722
Medium · 5.5
CWE-190 Oct 14, 2025
Integer Overflow or Wraparound in Rdkcentral Rdk-b
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.
CVE-2025-20720
High · 8.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569.
CVE-2025-20719
High · 8.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418955; Issue ID: MSV-3570.
CVE-2025-20718
High · 7.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00419945; Issue ID: MSV-3581.
CVE-2025-20717
High · 7.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00419946; Issue ID: MSV-3582.
CVE-2025-20716
High · 7.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421149; Issue ID: MSV-3728.
CVE-2025-20715
High · 7.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00421152; Issue ID: MSV-3731.
CVE-2025-20714
High · 7.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432659; Issue ID: MSV-3902.
CVE-2025-20713
High · 7.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432661; Issue ID: MSV-3904.
CVE-2025-20712
High · 8.8
CWE-122 Oct 14, 2025
Heap-based Buffer Overflow in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.
CVE-2025-20711
High · 8.8
CWE-787 Oct 14, 2025
Out-of-bounds Write in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422399; Issue ID: MSV-3748.
CVE-2025-20710
High · 8.8
CWE-190 Oct 14, 2025
Integer Overflow or Wraparound in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418785; Issue ID: MSV-3515.
CVE-2025-20709
High · 8.8
CWE-120 Oct 14, 2025
Classic Buffer Overflow in Mediatek Software Development Kit
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00415809; Issue ID: MSV-3405.