Rdkcentral vulnerabilities

Products

• Rdk-b 42
• Rdkb Ccsppandm 4
• Rdkb 2

Newest

• google android, linuxfoundation yocto, mediatek, inc. mediatek chipset +3 more +5 more In preloader, there is a possible read of device unique identifiers due to a logic error. This... CVE-2026-20435 Fix available 4.6 MediumMarch 2, 2026
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 more In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20747 6.7 MediumNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2718, mt2737, mt6835, mt6878, mt6886, mt6897, mt6899, mt6982, mt6985, mt6986, mt6986d, mt6989, mt6990, mt6991, mt8676, mt8678, mt8755, mt8893 +3 more +5 more In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This... CVE-2025-20746 6.7 MediumNovember 4, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8195, mt8676, mt8678, mt8696 +2 more +4 more In preloader, there is a possible escalation of privilege due to an insecure default value. This... CVE-2025-20730 Public exploitFix available 6.7 MediumNovember 4, 2025
• google android, mediatek, inc. mt6835, mt6878, mt6886, mt6897, mt6899, mt6980d, mt6985, mt6989, mt6990, mt6991, mt8676, mt8678, mt8775, mt8791t, mt8796, mt8873, openwrt +1 more +3 more In gnss driver, there is a possible out of bounds read due to an integer overflow. This could... CVE-2025-20722 5.5 MediumOctober 14, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt6739, mt6761, mt6765, mt6768, mt6781, mt6789, mt6813, mt6833, mt6835, mt6853, mt6855, mt6877, mt6878, mt6879, mt6883, mt6885, mt6886, mt6889, mt6893, mt6895, mt6897, mt6899, mt6983, mt6985, mt6989, mt6990, mt6991, mt8188, mt8196, mt8370, mt8390, mt8676 +3 more +5 more In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2025-20696 Fix available 6.8 MediumAugust 4, 2025
• google android, linuxfoundation yocto, mediatek mt6781 +18 more +20 more In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2025-20656 Fix available 6.8 MediumApril 1, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390, mt8676, mt8678 +2 more +4 more In da, there is a possible out of bounds read due to a missing bounds check. This could lead to... CVE-2025-20651 4.1 MediumMarch 3, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390, mt8676, mt8678 +2 more +4 more In da, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2025-20650 6.8 MediumMarch 3, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390 +2 more +4 more In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2025-20635 Fix available 6.6 MediumFebruary 1, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8676 +2 more +4 more In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2024-20145 Fix available 6.6 MediumJanuary 1, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6878, mt6879, mt6880, mt6885, mt6886, mt6890, mt6893, mt6895, mt6897, mt6980, mt6985, mt6989, mt6990, mt8370, mt8390, mt8676 +2 more +4 more In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2024-20144 6.6 MediumJanuary 1, 2025
• google android, linuxfoundation yocto, mediatek, inc. mt2737, mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8370, mt8390, mt8676 +2 more +4 more In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2024-20143 6.6 MediumJanuary 1, 2025
• google android, mediatek mt2737, mt6781 +30 more +32 more In da, there is a possible out of bounds read due to a missing bounds check. This could lead to... CVE-2024-20136 6.2 MediumDecember 2, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt6781, mt6789, mt6835, mt6855, mt6878, mt6879, mt6880, mt6886, mt6890, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8188, mt8370, mt8390, mt8676 +2 more +4 more In da, there is a possible out of bounds read due to a missing bounds check. This could lead to... CVE-2024-20107 6.2 MediumNovember 4, 2024
• google android, linuxfoundation yocto, mediatek mt6781 +22 more +24 more In da, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2024-20104 Fix available 8.4 HighNovember 1, 2024
• google android, linuxfoundation yocto, mediatek mt6835 +13 more +15 more In wlan, there is a possible denial of service due to incorrect error handling. This could lead... CVE-2024-20089 7.5 HighSeptember 2, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8183, mt8188, mt8195, mt8390, mt8395, mt8673, mt8675, mt8676, mt8678 +2 more +4 more In power, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2024-20085 4.4 MediumSeptember 2, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6897, mt6980, mt6983, mt6985, mt6989, mt6990, mt8183, mt8188, mt8195, mt8390, mt8395, mt8673, mt8675, mt8676, mt8678 +2 more +4 more In power, there is a possible out of bounds read due to a missing bounds check. This could lead... CVE-2024-20084 4.4 MediumSeptember 2, 2024
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gnss service, there is a possible out of bounds write due to improper input validation. This... CVE-2024-20081 6.7 MediumJuly 1, 2024
• google android, linuxfoundation yocto, mediatek mt2735 +36 more +38 more In gnss service, there is a possible escalation of privilege due to improper certificate... CVE-2024-20080 9.8 CriticalJuly 1, 2024
• google android, mediatek mt6739, mt6761 +27 more +29 more In preloader, there is a possible escalation of privilege due to an insecure default value. This... CVE-2024-20056 Fix available 6.7 MediumMay 1, 2024
• google android, linuxfoundation yocto, mediatek mt2737 +61 more +63 more In DA, there is a possible permission bypass due to an incorrect status check. This could lead to... CVE-2023-32871 Fix available 5.3 MediumMay 1, 2024
• google android, linuxfoundation yocto, mediatek mt6761 +23 more +25 more In gnss, there is a possible escalation of privilege due to a missing bounds check. This could... CVE-2024-20054 6.6 MediumApril 1, 2024
• google android, linuxfoundation yocto, mediatek mt2713 +45 more +47 more In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead... CVE-2024-20053 8.4 HighApril 1, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 more In flashc, there is a possible information disclosure due to an uncaught exception. This could... CVE-2024-20052 4.4 MediumApril 1, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 more In flashc, there is a possible system crash due to an uncaught exception. This could lead to... CVE-2024-20051 2.3 LowApril 1, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 more In flashc, there is a possible information disclosure due to an uncaught exception. This could... CVE-2024-20050 4.4 MediumApril 1, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2737, mt6781, mt6789, mt6835, mt6855, mt6879, mt6880, mt6886, mt6890, mt6895, mt6980, mt6983, mt6985, mt6989, mt6990, mt8167, mt8168, mt8173, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8666, mt8667, mt8673, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8796, mt8797, mt8798 +2 more +4 more In flashc, there is a possible information disclosure due to an uncaught exception. This could... CVE-2024-20049 4.4 MediumApril 1, 2024
• google android, linux kernel, linuxfoundation yocto +48 more +50 more In wlan firmware, there is a possible out of bounds write due to improper input validation. This... CVE-2024-20040 Fix available 8.8 HighApril 1, 2024
• google android, linuxfoundation yocto, mediatek mt2713 +25 more +27 more In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to... CVE-2024-20023 Fix available 6.7 MediumMarch 1, 2024
• google android, linuxfoundation yocto, mediatek mt2737 +32 more +34 more In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead... CVE-2024-20022 Fix available 6.7 MediumMarch 1, 2024
• google android, mediatek mt2713, mt6781 +6 more +8 more In da, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2024-20006 Fix available 6.7 MediumFebruary 1, 2024
• google android, linuxfoundation yocto, mediatek, inc. mt2735, mt2737, mt6765, mt6768, mt6769, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6880, mt6885, mt6889, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8667, mt8765, mt8768, mt8786, mt8791, mt8791t, mt8791wifi, mt8798 +2 more +4 more In aee, there is a possible escalation of privilege due to a missing permission check. This could... CVE-2023-32855 6.7 MediumDecember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +38 more +40 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20832 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20831 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2713 +40 more +42 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20830 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20829 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2735 +37 more +39 more In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to... CVE-2023-20828 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek mt2713 +51 more +53 more In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2023-20821 6.7 MediumSeptember 4, 2023
• google android, linuxfoundation yocto, mediatek, inc. mt2735, mt2737, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6886, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8168, mt8321, mt8768, mt8781, mt8786 +2 more +4 more In power, there is a possible memory corruption due to an incorrect bounds check. This could lead... CVE-2023-20796 4.4 MediumAugust 7, 2023
• google android, linuxfoundation yocto, mediatek, inc. mt2713, mt2735, mt2737, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8395, mt8666, mt8667, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +2 more +4 more In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead... CVE-2023-20790 4.4 MediumAugust 7, 2023
• google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6893, mt6895, mt6980, mt6983, mt6985, mt6990, mt8167, mt8175, mt8195, mt8365, mt8385, mt8673, mt8781, mt8788, mt8789, openwrt +1 more +3 more In preloader, there is a possible out of bounds write due to a missing bounds check. This could... CVE-2023-20725 6.7 MediumJune 6, 2023
• google android, linuxfoundation yocto, mediatek, inc. mt2731, mt2735, mt2737, mt6580, mt6739, mt6761, mt6762, mt6765, mt6767, mt6768, mt6769, mt6771, mt6779, mt6781, mt6783, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6896, mt6980, mt6980d, mt6983, mt6985, mt6990, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +2 more +4 more In mnld, there is a possible leak of GPS location due to a missing permission check. This could... CVE-2023-20726 Fix available 3.3 LowMay 1, 2023
• rdkcentral rdkb ccsppandm A heap-based buffer over-read in Service_SetParamStringValue in cosa_x_cisco_com_ddns_dml.c of... CVE-2019-6964 8.8 HighJune 20, 2019
• rdkcentral rdkb ccsppandm A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK RDKB-20181217-1 CcspPandM module may... CVE-2019-6963 8.8 HighJune 20, 2019
• rdkcentral rdkb ccsppandm A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-20181217-1 CcspWifiAgent module... CVE-2019-6962 7.5 HighJune 20, 2019
• rdkcentral rdkb ccsppandm Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module... CVE-2019-6961 6.5 MediumJune 20, 2019