Critical severity · published Nov 19, 2020
CVE-2020-28951
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names
9.8
CVSS
1.8%
EPSS
No
On KEV
Description
libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openwrt · Openwrt
before 18.06.9; 19.07.0 before 19.07.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-28951
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-28951
git.openwrt.org
https://git.openwrt.org/?p=openwrt/openwrt.git%3Ba=commit%3Bh=5625f5bc36954d644cb80adf8de47854c65d91c3
git.openwrt.org
https://git.openwrt.org/?p=openwrt/openwrt.git%3Ba=log%3Bh=refs/tags/v18.06.9
git.openwrt.org
https://git.openwrt.org/?p=project/uci.git%3Ba=commit%3Bh=a3e650911f5e6f67dcff09974df3775dfd615da6
More from Openwrt
9.8
CVE-2026-30872
OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup
9.8
CVE-2026-30871
OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query
9.8
CVE-2025-20683
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
9.8
CVE-2025-20682
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
9.8
CVE-2025-20681
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check