OP
Product
openwrt
138
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 36Medium 90Low 2
Watch
Add openwrt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20696 | 6.8 | Aug 4 | In DA, there is a possible out of bounds write due to a missing bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20656 | 6.8 | Apr 7 | In DA, there is a possible out of bounds write due to a missing bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20650 | 6.8 | Mar 3 | In da, there is a possible out of bounds write due to a missing bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20748 | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20741 | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20747 | 6.7 | Nov 4 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check Affected: 21.02.0; 23.05.0 |
| CVE-2025-20746 | 6.7 | Nov 4 | In gnss service, there is a possible out of bounds write due to an incorrect bounds check Affected: 21.02.0; 23.05.0 |
| CVE-2025-20739 | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20738 | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20736 | 6.7 | Nov 4 | In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20730 | 6.7 | Nov 4 | In preloader, there is a possible escalation of privilege due to an insecure default value Affected: 21.02.0; 23.05.0 |
| CVE-2024-20081 | 6.7 | Jul 1 | In gnss service, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0; 22.03.5 |
| CVE-2024-20056 | 6.7 | May 6 | In preloader, there is a possible escalation of privilege due to an insecure default value Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20023 | 6.7 | Mar 4 | In flashc, there is a possible out of bounds write due to lack of valudation Affected: 19.07.0; 21.02.0 |
| CVE-2024-20022 | 6.7 | Mar 4 | In lk, there is a possible escalation of privilege due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2024-20006 | 6.7 | Feb 5 | In da, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-32855 | 6.7 | Dec 4 | In aee, there is a possible escalation of privilege due to a missing permission check Affected: 19.07.0; 21.02 |
| CVE-2023-32812 | 6.7 | Sep 4 | In gnss service, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0 |
| CVE-2023-32806 | 6.7 | Sep 4 | In wlan driver, there is a possible out of bounds write due to improper input validation Affected: 21.02.0 |
| CVE-2023-20832 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20831 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20830 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20829 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20828 | 6.7 | Sep 4 | In gps, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20821 | 6.7 | Sep 4 | In nvram, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20775 | 6.7 | Jul 4 | In display, there is a possible out of bounds write due to a missing bounds check Affected: 21.02 |
| CVE-2023-20725 | 6.7 | Jun 6 | In preloader, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20696 | 6.7 | May 15 | In preloader, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20695 | 6.7 | May 15 | In preloader, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2023-20694 | 6.7 | May 15 | In preloader, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2025-20635 | 6.6 | Feb 3 | In V6 DA, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0; 22.03.5 |
| CVE-2024-20145 | 6.6 | Jan 6 | In V6 DA, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20144 | 6.6 | Jan 6 | In V6 DA, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20143 | 6.6 | Jan 6 | In V6 DA, there is a possible out of bounds write due to a missing bounds check Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20073 | 6.6 | Jun 3 | In wlan service, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0 |
| CVE-2024-20072 | 6.6 | Jun 3 | In wlan driver, there is a possible out of bounds write due to improper input validation Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20054 | 6.6 | Apr 1 | In gnss, there is a possible escalation of privilege due to a missing bounds check Affected: 19.07.0; 21.02.0 |
| CVE-2026-53922 | 6.5 | Oct 12 | odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated) Affected: < 25.12.5 |
| CVE-2026-55490 | 6.5 | Jul 7 | OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service Affected: < 25.12.5 |
| CVE-2026-20419 | 6.5 | Feb 2 | In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception Affected: 19.07.0; 21.02.0 |
| CVE-2025-20695 | 6.5 | Jul 8 | In Bluetooth FW, there is a possible system crash due to an uncaught exception Affected: 21.02.0; 23.05 |
| CVE-2025-20694 | 6.5 | Jul 8 | In Bluetooth FW, there is a possible system crash due to an uncaught exception Affected: 21.02.0; 23.05 |
| CVE-2025-20693 | 6.5 | Jul 8 | In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check Affected: 21.02.0; 23.05 |
| CVE-2025-20649 | 6.5 | Mar 3 | In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check Affected: 23.05 |
| CVE-2024-20139 | 6.5 | Dec 2 | In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions Affected: 23.05.0 |
| CVE-2021-22161 | 6.5 | Feb 7 | In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router Affected: 19.07.0 through 19.07.6 |
| CVE-2024-20136 | 6.2 | Dec 2 | In da, there is a possible out of bounds read due to a missing bounds check Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2024-20107 | 6.2 | Nov 4 | In da, there is a possible out of bounds read due to a missing bounds check Affected: 19.07.0; 21.02.0; 23.05 |
| CVE-2021-32019 | 6.1 | Aug 2 | There is missing input validation of host names displayed in OpenWrt before 19.07.8 Affected: 19.07.0 before 19.07.8 |
| CVE-2018-19630 | 6.1 | Nov 28 | cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI Affected: through 18.06.1 |
