OP
Product
openwrt
138
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 36Medium 90Low 2
Watch
Add openwrt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30872 | 9.8 | Mar 19 | OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup Affected: >= 25.12.0-rc1, < 25.12.1; < 24.10.6 |
| CVE-2026-30871 | 9.8 | Mar 19 | OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query Affected: < 24.10.6; >= 25.12.0-rc1, < 25.12.1 |
| CVE-2025-20683 | 9.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20682 | 9.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20681 | 9.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20674 | 9.8 | Jun 2 | In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check Affected: 19.07.0; 21.02.0; 21.02.0; 23.05 |
| CVE-2025-20654 | 9.8 | Apr 7 | In wlan service, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2024-20017 | 9.8 | Mar 4 | In wlan service, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0 |
| CVE-2020-28951 | 9.8 | Nov 19 | libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names Affected: before 18.06.9; 19.07.0 before 19.07.5 |
| CVE-2026-62948 | 9.6 | Jul 15 | OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI Affected: < 25.12.5 |
| CVE-2026-20430 | 8.8 | Mar 2 | In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0; 23.05.0 |
| CVE-2026-20408 | 8.8 | Feb 2 | In wlan, there is a possible out of bounds write due to a heap buffer overflow Affected: 19.07.0; 21.02.0; 23.05.0 |
| CVE-2025-62525 | 8.8 | Oct 22 | OpenWrt Project is a Linux operating system targeting embedded devices Affected: before 24.10.4 |
| CVE-2025-20720 | 8.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20719 | 8.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20712 | 8.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20711 | 8.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20710 | 8.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an integer overflow Affected: 19.07.0; 21.02.0 |
| CVE-2025-20709 | 8.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20686 | 8.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20685 | 8.8 | Jul 8 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2024-20040 | 8.8 | Apr 1 | In wlan firmware, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0 |
| CVE-2021-28961 | 8.8 | Mar 21 | applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests Affected: 19.07.0 |
| CVE-2019-17367 | 8.8 | Oct 18 | OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, firewall/rules,… Affected: 18 |
| CVE-2018-11116 | 8.8 | Jun 19 | OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus… Affected: All versions, or not specified |
| CVE-2024-20104 | 8.4 | Nov 4 | In da, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20053 | 8.4 | Apr 1 | In flashc, there is a possible out of bounds write due to an uncaught exception Affected: 19.07.0; 21.02.0 |
| CVE-2024-20146 | 8.1 | Jan 6 | In wlan STA driver, there is a possible out of bounds write due to improper input validation Affected: 23.05 |
| CVE-2020-7982 | 8.1 | Mar 16 | An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7 Affected: 18.06.0 before 18.06.7; 19.07.0 |
| CVE-2025-20742 | 8.0 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2026-30874 | 7.8 | Mar 19 | OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation Affected: < 24.10.6 |
| CVE-2025-20737 | 7.8 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20735 | 7.8 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20733 | 7.8 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-62526 | 7.8 | Oct 22 | OpenWrt Project is a Linux operating system targeting embedded devices Affected: before 24.10.4 |
| CVE-2025-20718 | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20717 | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20716 | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20715 | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20714 | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20713 | 7.8 | Oct 14 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20705 | 7.8 | Sep 1 | In monitor_hang, there is a possible memory corruption due to use after free Affected: 19.07.0; 21.02.0 |
| CVE-2022-38333 | 7.5 | Sep 19 | Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value() Affected: before 21.02.3; 22.03.0 |
| CVE-2020-7248 | 7.5 | Mar 16 | libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow Affected: 18.06.0 before 18.06.7; 19.07.0; 19.07.0; 19.07.0 |
| CVE-2019-19945 | 7.5 | Mar 16 | uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error Affected: 18.06.0 through 18.06.5; 19.07.0; 19.07.0; 19.07.0 |
| CVE-2023-20820 | 7.2 | Sep 4 | In wlan service, there is a possible command injection due to improper input validation Affected: 19.07.0; 21.02.0 |
| CVE-2025-20696 | 6.8 | Aug 4 | In DA, there is a possible out of bounds write due to a missing bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20656 | 6.8 | Apr 7 | In DA, there is a possible out of bounds write due to a missing bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20650 | 6.8 | Mar 3 | In da, there is a possible out of bounds write due to a missing bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20748 | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
