YO
Product
Yocto
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 16Medium 93Low 2
Watch
Add Yocto to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20849 | 6.5 | Sep 4 | In imgsys_cmdq, there is a possible use after free due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20848 | 6.5 | Sep 4 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20842 | 6.5 | Sep 4 | In imgsys_cmdq, there is a possible out of bounds write due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20841 | 6.5 | Sep 4 | In imgsys, there is a possible out of bounds write due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20840 | 6.5 | Sep 4 | In imgsys, there is a possible out of bounds read and write due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20803 | 6.5 | Aug 7 | In imgsys, there is a possible memory corruption due to improper input validation Affected: 4.0 |
| CVE-2023-20802 | 6.5 | Aug 7 | In imgsys, there is a possible memory corruption due to improper input validation Affected: 4.0 |
| CVE-2023-20800 | 6.5 | Aug 7 | In imgsys, there is a possible system crash due to a mssing ptr check Affected: 4.0 |
| CVE-2023-20835 | 6.4 | Sep 4 | In camsys, there is a possible use after free due to a race condition Affected: 4.0 |
| CVE-2023-20801 | 6.4 | Aug 7 | In imgsys, there is a possible use after free due to a race condition Affected: 4.0 |
| CVE-2023-20736 | 6.4 | Jun 6 | In vcu, there is a possible out of bounds write due to a race condition Affected: 4.0 |
| CVE-2024-20055 | 6.3 | Apr 1 | In imgsys, there is a possible information disclosure due to a missing bounds check Affected: 4.0 |
| CVE-2024-20107 | 6.2 | Nov 4 | In da, there is a possible out of bounds read due to a missing bounds check Affected: 4.0 |
| CVE-2024-20147 | 5.3 | Feb 3 | In Bluetooth FW, there is a possible reachable assertion due to improper exception handling Affected: 3.3; 4.0; 5.0 |
| CVE-2023-32871 | 5.3 | May 6 | In DA, there is a possible permission bypass due to an incorrect status check Affected: 3.3; 4.0 |
| CVE-2025-20765 | 4.7 | Dec 2 | In aee daemon, there is a possible system crash due to a race condition Affected: 4.0 |
| CVE-2026-20435 | 4.6 | Mar 2 | In preloader, there is a possible read of device unique identifiers due to a logic error Affected: 4.0 |
| CVE-2024-20152 | 4.4 | Jan 6 | In wlan STA driver, there is a possible reachable assertion due to improper exception handling Affected: 3.3; 4.0; 5.0 |
| CVE-2024-20085 | 4.4 | Sep 2 | In power, there is a possible out of bounds read due to a missing bounds check Affected: 2.6; 3.3; 4.0 |
| CVE-2024-20084 | 4.4 | Sep 2 | In power, there is a possible out of bounds read due to a missing bounds check Affected: 2.6; 3.3; 4.0 |
| CVE-2024-20052 | 4.4 | Apr 1 | In flashc, there is a possible information disclosure due to an uncaught exception Affected: 3.3 |
| CVE-2024-20050 | 4.4 | Apr 1 | In flashc, there is a possible information disclosure due to an uncaught exception Affected: 3.3 |
| CVE-2024-20049 | 4.4 | Apr 1 | In flashc, there is a possible information disclosure due to an uncaught exception Affected: 3.3 |
| CVE-2023-32815 | 4.4 | Sep 4 | In gnss service, there is a possible out of bounds read due to improper input validation Affected: 2.6 |
| CVE-2023-32813 | 4.4 | Sep 4 | In gnss service, there is a possible out of bounds write due to improper input validation Affected: 2.6 |
| CVE-2023-32810 | 4.4 | Sep 4 | In bluetooth driver, there is a possible out of bounds read due to improper input validation Affected: 3.1; 3.3; 4.0 |
| CVE-2023-32807 | 4.4 | Sep 4 | In wlan service, there is a possible out of bounds read due to improper input validation Affected: 4.0 |
| CVE-2023-20796 | 4.4 | Aug 7 | In power, there is a possible memory corruption due to an incorrect bounds check Affected: 2.6; 3.3 |
| CVE-2023-20790 | 4.4 | Aug 7 | In nvram, there is a possible out of bounds write due to a missing bounds check Affected: 2.6; 3.3 |
| CVE-2023-20747 | 4.4 | Jun 6 | In vcu, there is a possible memory corruption due to type confusion Affected: 4.0 |
| CVE-2023-20731 | 4.4 | Jun 6 | In wlan, there is a possible out of bounds read due to a missing bounds check Affected: 3.1; 3.3; 4.0 |
| CVE-2023-20730 | 4.4 | Jun 6 | In wlan, there is a possible out of bounds read due to a missing bounds check Affected: 3.1; 3.3; 4.0 |
| CVE-2023-20729 | 4.4 | Jun 6 | In wlan, there is a possible out of bounds read due to a missing bounds check Affected: 3.1; 3.3; 4.0 |
| CVE-2023-20728 | 4.4 | Jun 6 | In wlan, there is a possible out of bounds read due to a missing bounds check Affected: 3.1; 3.3; 4.0 |
| CVE-2023-20727 | 4.4 | Jun 6 | In wlan, there is a possible out of bounds read due to a missing bounds check Affected: 4.0 |
| CVE-2023-20847 | 4.2 | Sep 4 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20846 | 4.2 | Sep 4 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20845 | 4.2 | Sep 4 | In imgsys, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20844 | 4.2 | Sep 4 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20843 | 4.2 | Sep 4 | In imgsys_cmdq, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2023-20839 | 4.2 | Sep 4 | In imgsys, there is a possible out of bounds read due to a missing valid range checking Affected: 4.0 |
| CVE-2025-20651 | 4.1 | Mar 3 | In da, there is a possible out of bounds read due to a missing bounds check Affected: 4.0 |
| CVE-2023-20838 | 4.0 | Sep 4 | In imgsys, there is a possible out of bounds read due to a race condition Affected: 3.1; 3.3; 4.0 |
