Lucene search

K
OpenwrtOpenwrt21.02.0

62 matches found

CVE
CVE
added 2025/07/08 3:15 a.m.11 views

CVE-2025-20690

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418038; Issue ID: MSV-3478.

5.5CVSS5.8AI score0.00016EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.11 views

CVE-2025-20692

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476.

5.5CVSS5.8AI score0.00016EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.11 views

CVE-2025-20693

In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09812521; Issue ID: MSV-34...

6.5CVSS6.2AI score0.00008EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20682

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445.

9.8CVSS6.8AI score0.00112EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20683

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444.

9.8CVSS6.8AI score0.00112EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20685

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409.

8.8CVSS7.2AI score0.00032EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20689

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479.

5.5CVSS5.8AI score0.00016EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20691

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477.

5.5CVSS5.8AI score0.00016EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20694

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.

6.5CVSS6.6AI score0.00019EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.10 views

CVE-2025-20695

In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.

6.5CVSS6.6AI score0.00019EPSS
CVE
CVE
added 2025/07/08 3:15 a.m.9 views

CVE-2025-20688

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Issue ID: MSV-3480.

5.5CVSS5.8AI score0.00016EPSS
CVE
CVE
added 2025/09/01 6:15 a.m.6 views

CVE-2025-20705

In monitor_hang, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09989078; Issue ID: MSV-3964.

7.8CVSS6.3AI score0.00005EPSS
Total number of security vulnerabilities62