YO
Product
Yocto
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 16Medium 93Low 2
Watch
Add Yocto to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-20148 | 9.8 | Jan 6 | In wlan STA FW, there is a possible out of bounds write due to improper input validation Affected: 3.3; 4.0; 5.0 |
| CVE-2024-20080 | 9.8 | Jul 1 | In gnss service, there is a possible escalation of privilege due to improper certificate validation Affected: 2.6; 3.3; 4.0 |
| CVE-2024-25626 | 9.8 | Feb 19 | Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture Affected: before 3.1.31; 3.2 before 4.0.16; 4.1 before 4.3.2 |
| CVE-2024-20040 | 8.8 | Apr 1 | In wlan firmware, there is a possible out of bounds write due to improper input validation Affected: 3.3; 4.0 |
| CVE-2024-20104 | 8.4 | Nov 4 | In da, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2024-20053 | 8.4 | Apr 1 | In flashc, there is a possible out of bounds write due to an uncaught exception Affected: 3.3 |
| CVE-2024-20146 | 8.1 | Jan 6 | In wlan STA driver, there is a possible out of bounds write due to improper input validation Affected: 3.3; 4.0; 5.0 |
| CVE-2025-20705 | 7.8 | Sep 1 | In monitor_hang, there is a possible memory corruption due to use after free Affected: 2.6 |
| CVE-2025-61611 | 7.5 | Mar 9 | In modem, there is a possible improper input validation Affected: All versions, or not specified |
| CVE-2024-20153 | 7.5 | Jan 6 | In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID Affected: 3.3; 4.0; 5.0 |
| CVE-2024-20089 | 7.5 | Sep 2 | In wlan, there is a possible denial of service due to incorrect error handling Affected: 2.6; 3.3; 4.0 |
| CVE-2023-32820 | 7.5 | Oct 2 | In wlan firmware, there is a possible firmware assertion due to improper input handling Affected: 3.1; 3.3 |
| CVE-2023-20693 | 7.5 | Jul 4 | In wlan firmware, there is possible system crash due to an uncaught exception Affected: 4.0 |
| CVE-2023-20692 | 7.5 | Jul 4 | In wlan firmware, there is possible system crash due to an uncaught exception Affected: 4.0 |
| CVE-2023-20691 | 7.5 | Jul 4 | In wlan firmware, there is possible system crash due to an integer overflow Affected: 4.0 |
| CVE-2023-20690 | 7.5 | Jul 4 | In wlan firmware, there is possible system crash due to an integer overflow Affected: 4.0 |
| CVE-2023-20689 | 7.5 | Jul 4 | In wlan firmware, there is possible system crash due to an integer overflow Affected: 4.0 |
| CVE-2022-32666 | 7.5 | Jul 4 | In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2022-32589 | 7.5 | Oct 7 | In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release Affected: 3.1; 3.3 |
| CVE-2025-20696 | 6.8 | Aug 4 | In DA, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2025-20656 | 6.8 | Apr 7 | In DA, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2025-20650 | 6.8 | Mar 3 | In da, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2025-20747 | 6.7 | Nov 4 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check Affected: 4.0 |
| CVE-2025-20746 | 6.7 | Nov 4 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check Affected: 4.0 |
| CVE-2025-20730 | 6.7 | Nov 4 | In preloader, there is a possible escalation of privilege due to an insecure default value Affected: 4.0 |
| CVE-2024-20140 | 6.7 | Jan 6 | In power, there is a possible out of bounds write due to a missing bounds check Affected: 3.3; 4.0; 5.0 |
| CVE-2024-20099 | 6.7 | Oct 7 | In power, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2024-20098 | 6.7 | Oct 7 | In power, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2024-20081 | 6.7 | Jul 1 | In gnss service, there is a possible out of bounds write due to improper input validation Affected: 2.6; 3.3; 4.0 |
| CVE-2024-20023 | 6.7 | Mar 4 | In flashc, there is a possible out of bounds write due to lack of valudation Affected: 3.3 |
| CVE-2024-20022 | 6.7 | Mar 4 | In lk, there is a possible escalation of privilege due to a missing bounds check Affected: 3.3 |
| CVE-2023-32855 | 6.7 | Dec 4 | In aee, there is a possible escalation of privilege due to a missing permission check Affected: 2.6; 3.3; 4.0 |
| CVE-2023-32829 | 6.7 | Oct 2 | In apusys, there is a possible out of bounds write due to an integer overflow Affected: 3.1; 3.3; 4.0 |
| CVE-2023-32812 | 6.7 | Sep 4 | In gnss service, there is a possible out of bounds write due to improper input validation Affected: 2.6 |
| CVE-2023-32811 | 6.7 | Sep 4 | In connectivity system driver, there is a possible out of bounds write due to improper input validation Affected: 4.0 |
| CVE-2023-32806 | 6.7 | Sep 4 | In wlan driver, there is a possible out of bounds write due to improper input validation Affected: 4.0 |
| CVE-2023-20832 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 2.6 |
| CVE-2023-20831 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 2.6 |
| CVE-2023-20830 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 2.6 |
| CVE-2023-20829 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 2.6 |
| CVE-2023-20828 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 2.6 |
| CVE-2023-20821 | 6.7 | Sep 4 | In nvram, there is a possible out of bounds write due to a missing bounds check Affected: 2.6 |
| CVE-2023-20805 | 6.7 | Aug 7 | In imgsys, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2023-20804 | 6.7 | Aug 7 | In imgsys, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
| CVE-2023-20746 | 6.7 | Jun 6 | In vcu, there is a possible out of bounds write due to improper locking Affected: 4.0 |
| CVE-2023-20745 | 6.7 | Jun 6 | In vcu, there is a possible out of bounds write due to improper locking Affected: 4.0 |
| CVE-2023-20744 | 6.7 | Jun 6 | In vcu, there is a possible use after free due to a logic error Affected: 4.0 |
| CVE-2023-20743 | 6.7 | Jun 6 | In vcu, there is a possible out of bounds write due to improper locking Affected: 4.0 |
| CVE-2023-20740 | 6.7 | Jun 6 | In vcu, there is a possible memory corruption due to a logic error Affected: 4.0 |
| CVE-2023-20738 | 6.7 | Jun 6 | In vcu, there is a possible out of bounds write due to a missing bounds check Affected: 4.0 |
