Approved changes feed: RSS · Atom

cpe:2.3:a:rdkcentral:rdk-b:2024q1:*:*:*:*:*:*:*

part: a version: 2024q1 update: *

VendorRdkcentral (03c1f30c-19da-58fa-bea2-839ae042c439)
ProductRdk B (cbd3b397-b2f7-5e1a-9190-800b00ac4ecc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-20435 vulnerable 2026-06-08 07:49:12.031717 Details available
In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.
Published: 2026-03-02T08:39:12.070Z
Updated: 2026-03-30T13:05:38.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20747 vulnerable 2026-06-08 07:08:49.340058 Details available
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966.
Published: 2025-11-04T06:20:19.607Z
Updated: 2026-02-26T17:47:20.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20746 vulnerable 2026-06-08 07:08:49.334691 Details available
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967.
Published: 2025-11-04T06:20:17.860Z
Updated: 2026-02-26T17:47:21.269Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20730 vulnerable 2026-06-08 07:08:49.281759 Details available
In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10068463; Issue ID: MSV-4141.
Published: 2025-11-04T06:19:47.152Z
Updated: 2026-02-26T17:47:27.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20722 vulnerable 2026-06-08 07:08:49.225143 Details available
In gnss driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09920036; Issue ID: MSV-3798.
Published: 2025-10-14T09:11:48.751Z
Updated: 2025-10-14T14:04:29.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20696 vulnerable 2026-06-08 07:08:49.118912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20656 vulnerable 2026-06-08 07:08:48.812432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20651 vulnerable 2026-06-08 07:08:48.787325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20650 vulnerable 2026-06-08 07:08:48.785784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-20635 vulnerable 2026-06-08 07:08:48.607095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20145 vulnerable 2026-06-08 06:27:17.324822 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20144 vulnerable 2026-06-08 06:27:17.312599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20143 vulnerable 2026-06-08 06:27:17.303423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20136 vulnerable 2026-06-08 06:27:17.235263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20107 vulnerable 2026-06-08 06:27:16.836190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20104 vulnerable 2026-06-08 06:27:16.815330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.