OP
Product
openwrt
by openwrt · last CVE Oct 12, 2026
138
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 10High 36Medium 90Low 2
Watch

Add openwrt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20696
6.8
0%
Aug 4
In DA, there is a possible out of bounds write due to a missing bounds check
Affected: 21.02.0; 23.05
CVE-2025-20656
6.8
0%
Apr 7
In DA, there is a possible out of bounds write due to a missing bounds check
Affected: 21.02.0; 23.05
CVE-2025-20650
6.8
0%
Mar 3
In da, there is a possible out of bounds write due to a missing bounds check
Affected: 21.02.0; 23.05
CVE-2025-20748
6.7
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20741
6.7
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20747
6.7
0%
Nov 4
In gnss service, there is a possible out of bounds write due to an incorrect bounds check
Affected: 21.02.0; 23.05.0
CVE-2025-20746
6.7
0%
Nov 4
In gnss service, there is a possible out of bounds write due to an incorrect bounds check
Affected: 21.02.0; 23.05.0
CVE-2025-20739
6.7
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20738
6.7
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20736
6.7
0%
Nov 4
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20730
6.7
0%
Nov 4
In preloader, there is a possible escalation of privilege due to an insecure default value
Affected: 21.02.0; 23.05.0
CVE-2024-20081
6.7
0%
Jul 1
In gnss service, there is a possible out of bounds write due to improper input validation
Affected: 19.07.0; 21.02.0; 22.03.5
CVE-2024-20056
6.7
0%
May 6
In preloader, there is a possible escalation of privilege due to an insecure default value
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20023
6.7
0%
Mar 4
In flashc, there is a possible out of bounds write due to lack of valudation
Affected: 19.07.0; 21.02.0
CVE-2024-20022
6.7
0%
Mar 4
In lk, there is a possible escalation of privilege due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2024-20006
6.7
0%
Feb 5
In da, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-32855
6.7
0%
Dec 4
In aee, there is a possible escalation of privilege due to a missing permission check
Affected: 19.07.0; 21.02
CVE-2023-32812
6.7
0%
Sep 4
In gnss service, there is a possible out of bounds write due to improper input validation
Affected: 19.07.0; 21.02.0
CVE-2023-32806
6.7
0%
Sep 4
In wlan driver, there is a possible out of bounds write due to improper input validation
Affected: 21.02.0
CVE-2023-20832
6.7
0%
Sep 4
In gps, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20831
6.7
0%
Sep 4
In gps, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20830
6.7
0%
Sep 4
In gps, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20829
6.7
0%
Sep 4
In gps, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20828
6.7
0%
Sep 4
In gps, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20821
6.7
0%
Sep 4
In nvram, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20775
6.7
0%
Jul 4
In display, there is a possible out of bounds write due to a missing bounds check
Affected: 21.02
CVE-2023-20725
6.7
0%
Jun 6
In preloader, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20696
6.7
0%
May 15
In preloader, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20695
6.7
0%
May 15
In preloader, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2023-20694
6.7
0%
May 15
In preloader, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2025-20635
6.6
0%
Feb 3
In V6 DA, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0; 22.03.5
CVE-2024-20145
6.6
0%
Jan 6
In V6 DA, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20144
6.6
0%
Jan 6
In V6 DA, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20143
6.6
0%
Jan 6
In V6 DA, there is a possible out of bounds write due to a missing bounds check
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20073
6.6
0%
Jun 3
In wlan service, there is a possible out of bounds write due to improper input validation
Affected: 19.07.0; 21.02.0
CVE-2024-20072
6.6
0%
Jun 3
In wlan driver, there is a possible out of bounds write due to improper input validation
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20054
6.6
0%
Apr 1
In gnss, there is a possible escalation of privilege due to a missing bounds check
Affected: 19.07.0; 21.02.0
CVE-2026-53922
6.5
1%
Oct 12
odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)
Affected: < 25.12.5
CVE-2026-55490
6.5
1%
Jul 7
OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service
Affected: < 25.12.5
CVE-2026-20419
6.5
1%
Feb 2
In wlan AP/STA firmware, there is a possible system becoming irresponsive due to an uncaught exception
Affected: 19.07.0; 21.02.0
CVE-2025-20695
6.5
0%
Jul 8
In Bluetooth FW, there is a possible system crash due to an uncaught exception
Affected: 21.02.0; 23.05
CVE-2025-20694
6.5
0%
Jul 8
In Bluetooth FW, there is a possible system crash due to an uncaught exception
Affected: 21.02.0; 23.05
CVE-2025-20693
6.5
0%
Jul 8
In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check
Affected: 21.02.0; 23.05
CVE-2025-20649
6.5
0%
Mar 3
In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check
Affected: 23.05
CVE-2024-20139
6.5
0%
Dec 2
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions
Affected: 23.05.0
CVE-2021-22161
6.5
1%
Feb 7
In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router
Affected: 19.07.0 through 19.07.6
CVE-2024-20136
6.2
0%
Dec 2
In da, there is a possible out of bounds read due to a missing bounds check
Affected: 19.07.0; 21.02.0; 23.05
CVE-2024-20107
6.2
0%
Nov 4
In da, there is a possible out of bounds read due to a missing bounds check
Affected: 19.07.0; 21.02.0; 23.05
CVE-2021-32019
6.1
1%
Aug 2
There is missing input validation of host names displayed in OpenWrt before 19.07.8
Affected: 19.07.0 before 19.07.8
CVE-2018-19630
6.1
1%
Nov 28
cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI
Affected: through 18.06.1
Page 1 of 2 · 90 total