OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup

OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check

In wlan service, there is a possible out of bounds write due to an incorrect bounds check

In wlan service, there is a possible out of bounds write due to improper input validation

libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names

OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check

In wlan, there is a possible out of bounds write due to a heap buffer overflow

OpenWrt vulnerable to local privilage escalation

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an integer overflow

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan firmware, there is a possible out of bounds write due to improper input validation

applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests

OpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless/radio1.network1, firewall, firewall/zones, firewall/forwards, firewall/rules,…

OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i.e., achieve ubus…

In da, there is a possible out of bounds write due to a missing bounds check

In flashc, there is a possible out of bounds write due to an uncaught exception

In wlan STA driver, there is a possible out of bounds write due to improper input validation

An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

OpenWrt procd PATH Environment Variable Filter Bypass via Incorrect String Comparison Leads to Privilege Escalation

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

OpenWrt ubusd vulnerable to heap buffer overflow

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In monitor_hang, there is a possible memory corruption due to use after free

Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value()

libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error

In wlan service, there is a possible command injection due to improper input validation

In DA, there is a possible out of bounds write due to a missing bounds check

In DA, there is a possible out of bounds write due to a missing bounds check

In da, there is a possible out of bounds write due to a missing bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check