rdk-b vulnerabilities and fixes

Recent CVEs affecting rdk-b, with upgrade or downgrade steps. 23 tracked.

Also searched as: rdk b.

rdk-b has 23 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-02. Highest priority: CVE-2024-20080 (score 50/100).

• CVE-2025-20746 MEDIUM 6.7 DOWNGRADE DOWNGRADE In gnss service, there is a possible out of bounds write due to an incorrect bounds check
• CVE-2025-20747 MEDIUM 6.7 DOWNGRADE DOWNGRADE In gnss service, there is a possible out of bounds write due to an incorrect bounds check
• CVE-2025-20722 MEDIUM 5.5 DOWNGRADE MITIGATE In gnss driver, there is a possible out of bounds read due to an integer overflow
• CVE-2026-20435 MEDIUM 4.6 DOWNGRADE DOWNGRADE In preloader, there is a possible read of device unique identifiers due to a logic error
• CVE-2025-20730 MEDIUM 6.7 DOWNGRADE DOWNGRADE In preloader, there is a possible escalation of privilege due to an insecure default value
• CVE-2025-20696 MEDIUM 6.8 DOWNGRADE DOWNGRADE In DA, there is a possible out of bounds write due to a missing bounds check
• CVE-2025-20656 MEDIUM 6.8 DOWNGRADE DOWNGRADE In DA, there is a possible out of bounds write due to a missing bounds check
• CVE-2025-20651 MEDIUM 4.1 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds read due to a missing bounds check
• CVE-2025-20650 MEDIUM 6.8 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds write due to a missing bounds check
• CVE-2025-20635 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
• CVE-2024-20145 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
• CVE-2024-20144 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
• CVE-2024-20143 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
• CVE-2024-20136 MEDIUM 6.2 DOWNGRADE MITIGATE In da, there is a possible out of bounds read due to a missing bounds check
• CVE-2024-20107 MEDIUM 6.2 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds read due to a missing bounds check
• CVE-2024-20104 HIGH 8.4 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds write due to a missing bounds check
• CVE-2024-20089 HIGH 7.5 DOWNGRADE DOWNGRADE In wlan, there is a possible denial of service due to incorrect error handling
• CVE-2024-20085 MEDIUM 4.4 DOWNGRADE DOWNGRADE In power, there is a possible out of bounds read due to a missing bounds check
• CVE-2024-20084 MEDIUM 4.4 DOWNGRADE DOWNGRADE In power, there is a possible out of bounds read due to a missing bounds check
• CVE-2024-20081 MEDIUM 6.7 DOWNGRADE DOWNGRADE In gnss service, there is a possible out of bounds write due to improper input validation
• CVE-2024-20080 CRITICAL 9.8 DOWNGRADE DOWNGRADE In gnss service, there is a possible escalation of privilege due to improper certificate validation
• CVE-2024-20056 MEDIUM 6.7 DOWNGRADE MITIGATE In preloader, there is a possible escalation of privilege due to an insecure default value
• CVE-2023-32871 MEDIUM 5.3 DOWNGRADE DOWNGRADE In DA, there is a possible permission bypass due to an incorrect status check

FAQ

How do I fix rdk-b vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rdk-b being exploited right now?

None of the tracked rdk-b CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rdk-b CVE should I patch first?

CVE-2024-20080 currently ranks highest (50/100): In gnss service, there is a possible escalation of privilege due to improper certificate validation.

RSS feed for rdk-b · ← Back to latest CVEs