Vulnerabilities > Yoctoproject

DATE CVE VULNERABILITY TITLE RISK
2023-04-06 CVE-2023-20679 Out-of-bounds Read vulnerability in multiple products
In wlan, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google yoctoproject linux CWE-125
4.4
2023-04-06 CVE-2023-20682 Integer Overflow or Wraparound vulnerability in multiple products
In wlan, there is a possible out of bounds write due to an integer overflow.
local
low complexity
google yoctoproject linux CWE-190
6.7
2023-04-06 CVE-2023-20677 Out-of-bounds Read vulnerability in multiple products
In wlan, there is a possible out of bounds read due to a missing bounds check.
local
low complexity
google yoctoproject linux CWE-125
4.4
2023-03-07 CVE-2023-20623 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in multiple products
In ion, there is a possible escalation of privilege due to improper locking.
local
high complexity
google yoctoproject CWE-367
6.4
2022-12-05 CVE-2022-32631 Out-of-bounds Write vulnerability in multiple products
In Wi-Fi, there is a possible out of bounds write due to improper input validation.
local
low complexity
google yoctoproject CWE-787
6.7
2022-12-05 CVE-2022-32632 Out-of-bounds Write vulnerability in multiple products
In Wi-Fi, there is a possible out of bounds write due to improper input validation.
local
low complexity
google yoctoproject CWE-787
6.7
2022-12-05 CVE-2022-32633 Improper Privilege Management vulnerability in multiple products
In Wi-Fi, there is a possible memory access violation due to a logic error.
local
low complexity
google yoctoproject CWE-269
6.7
2022-09-06 CVE-2022-26447 Out-of-bounds Write vulnerability in multiple products
In BT firmware, there is a possible out of bounds write due to a missing bounds check.
network
low complexity
google yoctoproject CWE-787
critical
9.8
2022-09-06 CVE-2022-26465 Out-of-bounds Write vulnerability in multiple products
In audio ipi, there is a possible out of bounds write due to an incorrect bounds check.
local
low complexity
google yoctoproject CWE-787
6.7
2022-09-06 CVE-2022-26466 Integer Overflow or Wraparound vulnerability in multiple products
In audio ipi, there is a possible out of bounds write due to an integer overflow.
local
low complexity
google yoctoproject CWE-190
6.7