OpenWrt 23.05.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:openwrt:openwrt:23.05.0:-:*:*:*:*:*:*

part: o version: 23.05.0 update: -

VendorOpenwrt (f96faf39-ea80-51de-ab00-c5c27e1349a3)
ProductOpenwrt (50e39c5f-d469-59e8-8a25-4021439d5750)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openwrtorg/sdk purl2cpe 2026-06-01 10:17:17.794473
pkg:github/openwrt/openwrt purl2cpe 2026-06-01 10:17:17.794474
pkg:gitlab/sdr/openwrt purl2cpe 2026-06-01 10:17:17.794476
pkg:sourceforge/openwrt purl2cpe 2026-06-01 10:17:17.794477

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-20435 vulnerable 2026-06-08 07:49:12.031995 Details available
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.
Published: 2026-03-02T08:39:12.070Z
Updated: 2026-03-30T13:05:38.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20430 vulnerable 2026-06-08 07:49:11.772101 Details available
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.
Published: 2026-03-02T08:39:08.082Z
Updated: 2026-03-30T13:05:32.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-20408 vulnerable 2026-06-08 07:49:11.614179 Details available
In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758.
Published: 2026-02-02T08:14:56.694Z
Updated: 2026-03-30T13:02:57.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20765 vulnerable 2026-06-08 07:08:49.464115 Details available
In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10190802; Issue ID: MSV-4833.
Published: 2025-12-02T02:34:28.595Z
Updated: 2026-01-13T14:32:32.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20747 vulnerable 2026-06-08 07:08:49.340136 Details available
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.
Published: 2025-11-04T06:20:19.607Z
Updated: 2026-02-26T17:47:20.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20746 vulnerable 2026-06-08 07:08:49.334980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20730 vulnerable 2026-06-08 07:08:49.283500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20139 vulnerable 2026-06-08 06:27:17.265249 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.