Approved changes feed: RSS · Atom

cpe:2.3:o:openwrt:openwrt:22.03.5:*:*:*:*:*:*:*

part: o version: 22.03.5 update: *

VendorOpenwrt (f96faf39-ea80-51de-ab00-c5c27e1349a3)
ProductOpenwrt (50e39c5f-d469-59e8-8a25-4021439d5750)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openwrtorg/sdk purl2cpe 2026-06-01 10:17:17.765629
pkg:github/openwrt/openwrt purl2cpe 2026-06-01 10:17:17.765630
pkg:gitlab/sdr/openwrt purl2cpe 2026-06-01 10:17:17.765631
pkg:sourceforge/openwrt purl2cpe 2026-06-01 10:17:17.765633

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-20635 vulnerable 2026-06-08 07:08:48.617923 Details available
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09403752; Issue ID: MSV-2434.
Published: 2025-02-03T03:23:51.354Z
Updated: 2025-03-13T19:47:12.833Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20085 vulnerable 2026-06-08 06:27:16.604985 Details available
In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944204; Issue ID: MSV-1560.
Published: 2024-09-02T02:07:31.421Z
Updated: 2024-10-27T02:38:50.128Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20084 vulnerable 2026-06-08 06:27:16.600792 Details available
In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08944210; Issue ID: MSV-1561.
Published: 2024-09-02T02:07:29.670Z
Updated: 2024-10-27T02:38:25.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20081 vulnerable 2026-06-08 06:27:16.551296 Details available
In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08719602; Issue ID: MSV-1412.
Published: 2024-07-01T03:18:10.073Z
Updated: 2025-03-13T18:33:29.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.