Vulnerabilidades do Linuxfoundation Yocto

CVE-2025-61611 Alta · 7.5 CWE-20 09/03/2026

Improper Input Validation em Linuxfoundation Yocto

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed..

CVE-2026-20435 Média · 4.6 CWE-522 02/03/2026

Insufficiently Protected Credentials em Linuxfoundation Yocto

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.

CVE-2025-20765 Média · 4.7 CWE-362 02/12/2025

Race Condition em Linuxfoundation Yocto

In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.

CVE-2025-20747 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Linuxfoundation Yocto

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.

CVE-2025-20746 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Linuxfoundation Yocto

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.

CVE-2025-20730 Média · 6.7 CWE-287 04/11/2025

Improper Authentication em Linuxfoundation Yocto

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.