Approved changes feed: RSS · Atom

cpe:2.3:a:linuxfoundation:yocto:5.0:*:*:*:*:*:*:*

part: a version: 5.0 update: *

VendorLinuxfoundation (4b459c90-8cdb-5268-beb4-b69b5fe74234)
ProductYocto (72743053-bf88-583d-a4a7-f32621af7130)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-20153 vulnerable 2026-06-08 06:27:17.456484 Details available
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08990446 / ALPS09057442; Issue ID: MSV-1598.
Published: 2025-01-06T03:18:01.542Z
Updated: 2025-01-06T14:11:35.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20152 vulnerable 2026-06-08 06:27:17.448521 Details available
In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00389047 / ALPS09136505; Issue ID: MSV-1798.
Published: 2025-01-06T03:17:59.918Z
Updated: 2025-01-06T14:12:39.277Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20148 vulnerable 2026-06-08 06:27:17.358602 Details available
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID: MSV-1796.
Published: 2025-01-06T03:17:51.547Z
Updated: 2026-02-26T19:09:32.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20147 vulnerable 2026-06-08 06:27:17.350582 Details available
In Bluetooth FW, there is a possible reachable assertion due to improper exception handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389046 (Note: For MT79XX chipsets) / ALPS09136501 (Note: For MT2737, MT3603, MT6XXX, and MT8XXX chipsets); Issue ID: MSV-1797.
Published: 2025-02-03T03:24:09.635Z
Updated: 2025-02-03T16:24:37.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20146 vulnerable 2026-06-08 06:27:17.332008 Details available
In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389496 / ALPS09137491; Issue ID: MSV-1835.
Published: 2025-01-06T03:17:49.872Z
Updated: 2026-02-26T19:09:33.155Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20140 vulnerable 2026-06-08 06:27:17.268611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20139 vulnerable 2026-06-08 06:27:17.263204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.