openwrt vulnerabilities
CVEs whose affected-version data names the openwrt package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
16 CVEsRSS
CVE-2026-53922Medium· 6.5PoCodhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt
odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings through normal DHCPv6 SOLICIT and REQUEST exchanges and …
CVE-2025-20724Medium· 5.5In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID:…
CVE-2025-20722Medium· 5.5In gnss driver, there is a possible out of bounds read due to an integer overflow
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploit…
CVE-2025-20720High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20719High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20718High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch I…
CVE-2025-20716High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20715High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20714High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20713High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2025-20712High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20711High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20710High· 8.8In wlan AP driver, there is a possible out of bounds write due to an integer overflow
In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed f…
CVE-2025-20709High· 8.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not ne…
CVE-2025-20717High· 7.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed …
CVE-2021-33425Medium· 5.4A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the OpenWRT Hostname via the Hostname Change operation.
A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the OpenWRT Hostname via the Hostname Change operation.