Openwrt Openwrt vulnerabilities

• openwrt odhcpd, openwrt +1 more odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) CVE-2026-53922 6.5 MediumOctober 12, 2026
• openwrt OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download CVE-2026-62947 4.9 MediumJuly 15, 2026
• openwrt OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI CVE-2026-62948 9.6 CriticalJuly 15, 2026
• openwrt OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service CVE-2026-55490 6.5 MediumJuly 7, 2026
• openwrt luci, openwrt +1 more LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal CVE-2026-32721 8.6 HighMarch 19, 2026
• openwrt OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation CVE-2026-30874 1.8 LowMarch 19, 2026
• openwrt OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens CVE-2026-30873 2.4 LowMarch 19, 2026
• openwrt OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup CVE-2026-30872 9.5 CriticalMarch 19, 2026
• openwrt OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query CVE-2026-30871 9.5 CriticalMarch 19, 2026
• google android, linuxfoundation yocto, mediatek, inc. mediatek chipset +3 more +5 more In preloader, there is a possible read of device unique identifiers due to a logic error. This... CVE-2026-20435 Fix available 4.6 MediumMarch 2, 2026
• mediatek software development kit, mediatek, inc. mediatek chipset, openwrt +2 more In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2026-20430 8.8 HighMarch 2, 2026
• mediatek nbiot sdk, software development kit, mediatek, inc. mediatek chipset +1 more +3 more In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught... CVE-2026-20419 6.5 MediumFebruary 2, 2026
• mediatek software development kit, mediatek, inc. mediatek chipset, openwrt +2 more In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead... CVE-2026-20408 8.8 HighFebruary 2, 2026
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8113, mt8115, mt8139, mt8163, mt8168, mt8169, mt8183, mt8186, mt8188, mt8512, mt8516, mt8518, mt8519, mt8532, mt8676, mt8678, mt8695, mt8696, mt8698 +1 more +3 more In aee daemon, there is a possible system crash due to a race condition. This could lead to local... CVE-2025-20765 4.7 MediumDecember 2, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20748 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20741 6.7 MediumNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 more In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20747 6.7 MediumNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 more In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20746 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20739 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20738 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20736 6.7 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20734 5.3 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20732 5.3 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20731 5.3 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20729 4.2 MediumNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7603, mt7615, mt7622, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20742 8.0 HighNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20737 7.8 HighNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20735 7.8 HighNovember 4, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20733 7.8 HighNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8195, mt8676, mt8678, mt8696 +2 more +4 more In preloader, there is a possible escalation of privilege due to an insecure default value. This... CVE-2025-20730 Public exploitFix available 6.7 MediumNovember 4, 2025
• openwrt OpenWrt ubusd vulnerable to heap buffer overflow CVE-2025-62526 Fix available 7.9 HighOctober 22, 2025
• openwrt OpenWrt vulnerable to local privilage escalation CVE-2025-62525 Fix available 7.9 HighOctober 22, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This... CVE-2025-20724 5.5 MediumOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20717 7.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20716 7.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20715 7.8 HighOctober 14, 2025
• google android, mediatek, inc. mt6835, mt6878, mt6886, mt6897, mt6899, mt6980d, mt6985, mt6989, mt6990, mt6991, mt8676, mt8678, mt8775, mt8791t, mt8796, mt8873, openwrt +1 more +3 more In gnss driver, there is a possible out of bounds read due to an integer overflow. This could... CVE-2025-20722 5.5 MediumOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20714 7.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20713 7.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7603, mt7615, mt7622, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20720 8.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7603, mt7615, mt7622, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20719 8.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7615, mt7622, mt7663, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20718 7.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20709 8.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7915, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could... CVE-2025-20710 8.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6890, mt7916, mt7981, mt7986, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20711 8.8 HighOctober 14, 2025
• mediatek software development kit, mediatek, inc. mt6990, mt7990, mt7991, mt7992, mt7993, openwrt +2 more In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20712 8.8 HighOctober 14, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2735, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6899, mt6980d, mt6983, mt6985, mt6989, mt6990, mt6991, mt8169, mt8186, mt8188, mt8676, mt8678, mt8696, mt8775, mt8792, mt8796 +1 more +3 more In monitor_hang, there is a possible memory corruption due to use after free. This could lead to... CVE-2025-20705 7.8 HighSeptember 1, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6813, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8196, mt8370, mt8390, mt8676 +3 more +5 more In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2025-20696 Fix available 6.8 MediumAugust 4, 2025
• google android, mediatek software development kit, mediatek, inc. mt6639, mt6653, mt6985, mt6989, mt6990, mt6991, mt7925, mt7927, mt8196, mt8678, mt8796 +1 more +3 more In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead... CVE-2025-20695 6.5 MediumJuly 8, 2025
• google android, mediatek software development kit, mediatek, inc. mt2718, mt6639, mt6653, mt6985, mt6989, mt6990, mt6991, mt7925, mt7927, mt8113, mt8115, mt8127, mt8163, mt8168, mt8169, mt8173, mt8183, mt8186, mt8188, mt8195, mt8196, mt8370, mt8390, mt8391, mt8395, mt8512, mt8516, mt8519, mt8676, mt8678, mt8695, mt8696, mt8698, mt8786, mt8792, mt8796, mt8893 +1 more +3 more In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead... CVE-2025-20694 6.5 MediumJuly 8, 2025
• Show olderLoading…