Approved changes feed: RSS · Atom

cpe:2.3:o:openwrt:openwrt:23.05:*:*:*:*:*:*:*

part: o version: 23.05 update: *

VendorOpenwrt (f96faf39-ea80-51de-ab00-c5c27e1349a3)
ProductOpenwrt (50e39c5f-d469-59e8-8a25-4021439d5750)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/openwrtorg/sdk purl2cpe 2026-06-01 10:17:17.794467
pkg:github/openwrt/openwrt purl2cpe 2026-06-01 10:17:17.794468
pkg:gitlab/sdr/openwrt purl2cpe 2026-06-01 10:17:17.794470
pkg:sourceforge/openwrt purl2cpe 2026-06-01 10:17:17.794471

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-20722 vulnerable 2026-06-08 07:08:49.225240 Details available
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.
Published: 2025-10-14T09:11:48.751Z
Updated: 2025-10-14T14:04:29.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20712 vulnerable 2026-06-08 07:08:49.199795 Details available
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00422323; Issue ID: MSV-3810.
Published: 2025-10-14T09:11:30.703Z
Updated: 2026-02-26T17:47:43.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20696 vulnerable 2026-06-08 07:08:49.119021 Details available
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09915215; Issue ID: MSV-3801.
Published: 2025-08-04T01:49:46.880Z
Updated: 2025-08-04T13:47:57.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20695 vulnerable 2026-06-08 07:08:49.115302 Details available
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09741871; Issue ID: MSV-3317.
Published: 2025-07-08T02:00:41.955Z
Updated: 2025-07-14T16:33:28.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20694 vulnerable 2026-06-08 07:08:49.091334 Details available
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09752821; Issue ID: MSV-3342.
Published: 2025-07-08T02:00:40.101Z
Updated: 2025-07-14T16:33:57.018Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20693 vulnerable 2026-06-08 07:08:49.084683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20674 vulnerable 2026-06-08 07:08:49.022499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20656 vulnerable 2026-06-08 07:08:48.812692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20651 vulnerable 2026-06-08 07:08:48.787415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20650 vulnerable 2026-06-08 07:08:48.785964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20649 vulnerable 2026-06-08 07:08:48.775541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20152 vulnerable 2026-06-08 06:27:17.448755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20147 vulnerable 2026-06-08 06:27:17.350906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20146 vulnerable 2026-06-08 06:27:17.332337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20145 vulnerable 2026-06-08 06:27:17.325337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20144 vulnerable 2026-06-08 06:27:17.312835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20143 vulnerable 2026-06-08 06:27:17.303778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20136 vulnerable 2026-06-08 06:27:17.235648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20107 vulnerable 2026-06-08 06:27:16.836634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20104 vulnerable 2026-06-08 06:27:16.811004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20072 vulnerable 2026-06-08 06:27:16.448314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20071 vulnerable 2026-06-08 06:27:16.447548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20056 vulnerable 2026-06-08 06:27:16.274245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.