Skip to contentOpenwrt vulnerabilities
Newest
- google android, mediatek mt2737, mt6781 +30 more +32 moreIn da, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2024-201366.2 Medium
- openwrt luciAn issue in the luci-mod-rpc package in OpenWRT Luci LTS allows for privilege escalation from an...CVE-2024-512408.0 High
- google android, linuxfoundation yocto, mediatek, inc. mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8188, mt8370, mt8390, mt8676 +2 more +4 moreIn da, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2024-201076.2 Medium
- google android, linuxfoundation yocto, mediatek mt6781 +22 more +24 moreIn da, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2024-20104Fix available8.4 High
- google android, linuxfoundation yocto, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8183, mt8188, mt8195, mt8390, mt8395, mt8673, mt8675, mt8676, mt8678 +2 more +4 moreIn power, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2024-200854.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8183, mt8188, mt8195, mt8390, mt8395, mt8673, mt8675, mt8676, mt8678 +2 more +4 moreIn power, there is a possible out of bounds read due to a missing bounds check. This could lead...CVE-2024-200844.4 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 moreIn gnss service, there is a possible out of bounds write due to improper input validation. This...CVE-2024-200816.7 Medium
- mediatek mt6890, mt7622, software development kit +2 more +4 moreIn wlan service, there is a possible out of bounds write due to improper input validation. This...CVE-2024-200736.6 Medium
- mediatek mt6890, mt6990, mt7622 +3 more +5 moreIn wlan driver, there is a possible out of bounds write due to improper input validation. This...CVE-2024-200726.6 Medium
- mediatek software development kit, mediatek, inc. mt6890, mt6990, mt7622, openwrt +2 moreIn wlan driver, there is a possible out of bounds read due to improper input validation. This...CVE-2024-200714.4 Medium
- google android, mediatek mt6739, mt6761 +27 more +29 moreIn preloader, there is a possible escalation of privilege due to an insecure default value. This...CVE-2024-20056Fix available6.7 Medium
- google android, linuxfoundation yocto, mediatek mt2737 +61 more +63 moreIn DA, there is a possible permission bypass due to an incorrect status check. This could lead to...CVE-2023-32871Fix available5.3 Medium
- google android, linuxfoundation yocto, mediatek mt6761 +23 more +25 moreIn gnss, there is a possible escalation of privilege due to a missing bounds check. This could...CVE-2024-200546.6 Medium
- google android, linuxfoundation yocto, mediatek mt2713 +45 more +47 moreIn flashc, there is a possible out of bounds write due to an uncaught exception. This could lead...CVE-2024-200538.4 High
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...CVE-2024-200524.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible system crash due to an uncaught exception. This could lead to...CVE-2024-200512.3 Low
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...CVE-2024-200504.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 moreIn flashc, there is a possible information disclosure due to an uncaught exception. This could...CVE-2024-200494.4 Medium
- google android, linux kernel, linuxfoundation yocto +48 more +50 moreIn wlan firmware, there is a possible out of bounds write due to improper input validation. This...CVE-2024-20040Fix available8.8 High
- mediatek mt6890, mt7915, mt7916 +5 more +7 moreIn wlan service, there is a possible out of bounds write due to improper input validation. This...CVE-2024-20017Public exploitEPSS 46.6%9.8 Critical
- google android, linuxfoundation yocto, mediatek mt2713 +25 more +27 moreIn flashc, there is a possible out of bounds write due to lack of valudation. This could lead to...CVE-2024-20023Fix available6.7 Medium
- google android, linuxfoundation yocto, mediatek mt2737 +32 more +34 moreIn lk, there is a possible escalation of privilege due to a missing bounds check. This could lead...CVE-2024-20022Fix available6.7 Medium
- google android, mediatek mt2713, mt6781 +6 more +8 moreIn da, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2024-20006Fix available6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2735, mt2737, mt6765, mt6768, mt6769, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6880, mt6885, mt6889, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8667, mt8765, mt8768, mt8786, mt8791, mt8791t, mt8791wifi, mt8798 +2 more +4 moreIn aee, there is a possible escalation of privilege due to a missing permission check. This could...CVE-2023-328556.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2735, mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6895, mt6980, mt6983, mt6985, mt6990, mt8168, mt8175, mt8188, mt8188t, mt8195, mt8365 +1 more +3 moreIn gnss service, there is a possible out of bounds read due to improper input validation. This...CVE-2023-328154.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2735, mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6855t, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6895, mt6980, mt6983, mt6985, mt6990, mt8168, mt8175, mt8188, mt8195, mt8365, mt8666, mt8667, mt8673 +1 more +3 moreIn gnss service, there is a possible out of bounds write due to improper input validation. This...CVE-2023-328134.4 Medium
- google android, linuxfoundation yocto, mediatek mt8365 +2 more +4 moreIn gnss service, there is a possible out of bounds write due to improper input validation. This...CVE-2023-328126.7 Medium
- google android, linuxfoundation yocto, mediatek iot yocto +3 more +5 moreIn wlan driver, there is a possible out of bounds write due to improper input validation. This...CVE-2023-328066.7 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +38 more +40 moreIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-208326.7 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 moreIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-208316.7 Medium
- google android, linuxfoundation yocto, mediatek mt2713 +40 more +42 moreIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-208306.7 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 moreIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-208296.7 Medium
- google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 moreIn gps, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-208286.7 Medium
- google android, linuxfoundation yocto, mediatek mt2713 +51 more +53 moreIn nvram, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2023-208216.7 Medium
- mediatek mt6890, mt7603, mt7612 +12 more +14 moreIn wlan service, there is a possible command injection due to improper input validation. This...CVE-2023-208207.2 High
- google android, linuxfoundation yocto, mediatek, inc. mt2735, mt2737, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6886, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8168, mt8321, mt8768, mt8781, mt8786 +2 more +4 moreIn power, there is a possible memory corruption due to an incorrect bounds check. This could lead...CVE-2023-207964.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2735, mt2737, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +2 more +4 moreIn nvram, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2023-207904.4 Medium
- google android, mediatek, inc. mt6739, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6983, mt6985, mt6990, mt8168, mt8183, mt8195, mt8673, mt8781, openwrt +2 moreIn display, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2023-207756.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8167, mt8175, mt8195, mt8365, mt8385, mt8673, mt8781, mt8788, mt8789, openwrt +1 more +3 moreIn preloader, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2023-207256.7 Medium
- openwrt luciX-WRT luci 404 Error Template dispatcher.uc run_action cross site scriptingCVE-2023-30853.5 Low
- google android, linuxfoundation yocto, mediatek, inc. mt2731, mt2735, mt2737, mt6580, mt6739, mt6761, mt6762, mt6765, mt6767, mt6768, mt6769, mt6771, mt6779, mt6781, mt6783, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6896, mt6980, mt6980d, mt6983, mt6985, mt6990, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +2 more +4 moreIn mnld, there is a possible leak of GPS location due to a missing permission check. This could...CVE-2023-20726Fix available3.3 Low
- google android, mediatek, inc. mt6880, mt6890, mt8167, mt8175, mt8185, mt8195, mt8321, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, openwrt +2 moreIn preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n…CVE-2023-20696Public exploitFix available6.7 Medium
- google android, mediatek, inc. mt6835, mt6880, mt6886, mt6890, mt6980, mt6985, mt6990, mt8167, mt8175, mt8185, mt8195, mt8321, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, openwrt +2 moreIn preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n…CVE-2023-20695Fix available6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6769, mt6771, mt6779, mt6785, mt6789, mt6853, mt6855, mt6873, mt6879, mt6880, mt6885, mt6890, mt6895, mt6983, mt8167, mt8175, mt8185, mt8195, mt8321, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797, openwrt +2 moreIn preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not n…CVE-2023-20694Fix available6.7 Medium
- openwrtLuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js.CVE-2023-241825.4 Medium
- openwrt luciLuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm.CVE-2023-241815.4 Medium
- openwrt luciOpenWRT LuCI version git-22.140.66206-02913be was discovered to contain a stored cross-site...CVE-2022-414355.4 Medium
- openwrtOpenwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the...CVE-2022-383337.5 High
- openwrtOpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen.CVE-2021-459045.4 Medium
- openwrtOpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen.CVE-2021-459055.4 Medium
- Show moreLoading…