Vulnerabilidades de Openwrt

CVE-2026-20430 Alta · 8.8 CWE-787 02/03/2026

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.

CVE-2026-20419 Média · 6.5 CWE-754 02/02/2026

Improper Check for Unusual or Exceptional Conditions em Mediatek Nbiot Sdk

In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461663 / WCNCR00463309; Issue ID: MSV-4852.

CVE-2026-20408 Alta · 8.8 CWE-787 02/02/2026

Out-of-bounds Write em Mediatek Software Development Kit

In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758.

CVE-2025-20765 Média · 4.7 CWE-362 02/12/2025

Race Condition em Linuxfoundation Yocto

In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.

CVE-2025-20748 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-3950.

CVE-2025-20747 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Linuxfoundation Yocto

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.

CVE-2025-20746 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Linuxfoundation Yocto

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.

CVE-2025-20742 Alta · 8.0 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00432680; Issue ID: MSV-3949.

CVE-2025-20741 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-3958.

CVE-2025-20739 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435340; Issue ID: MSV-4038.

CVE-2025-20738 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435342; Issue ID: MSV-4039.

CVE-2025-20737 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040.

CVE-2025-20736 Média · 6.7 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00435347; Issue ID: MSV-4049.

CVE-2025-20735 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051.

CVE-2025-20734 Média · 5.3 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441507; Issue ID: MSV-4112.

CVE-2025-20733 Alta · 7.8 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138.

CVE-2025-20732 Média · 5.3 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441510; Issue ID: MSV-4139.

CVE-2025-20731 Média · 5.3 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege (when OceReducedNeighborReport is disabled). User interaction is not needed for exploitation. Patch ID: WCNCR00441511; Issue ID: MSV-4140.

CVE-2025-20730 Média · 6.7 CWE-287 04/11/2025

Improper Authentication em Linuxfoundation Yocto

In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.

CVE-2025-20729 Média · 4.2 CWE-787 04/11/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00441512; Issue ID: MSV-4153.

CVE-2025-62526 Alta · 7.8 CWE-122 22/10/2025

OpenWrt ubusd vulnerable to heap buffer overflow

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds.

CVE-2025-62525 Alta · 8.8 CWE-20 22/10/2025

OpenWrt vulnerable to local privilage escalation

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath of the DSL line. This only effects the lantiq target supporting xrx200, danube and amazon SoCs from Lantiq/Intel/MaxLinear with the DSL in PTM mode. The DSL driver for the VRX518 is not affected. ATM mode is also not affected. Most VDSL lines use PTM mode and most ADSL lines use ATM mode. OpenWrt is normally running as a single user system, but some services are sandboxed. This vulnerability could allow attackers to escape a ujail sandbox or other contains. This is fixed in OpenWrt 24.10.4. There are no workarounds.

CVE-2025-20724 Média · 5.5 CWE-125 14/10/2025

Out-of-bounds Read em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418894; Issue ID: MSV-3475.

CVE-2025-20722 Média · 5.5 CWE-190 14/10/2025

Integer Overflow or Wraparound em Rdkcentral Rdk-b

In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.

CVE-2025-20720 Alta · 8.8 CWE-787 14/10/2025

Out-of-bounds Write em Mediatek Software Development Kit

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569.