PatchTheCVErdkcentral vulnerabilities
Recent CVEs affecting rdkcentral products. 19 tracked.
rdkcentral has 19 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-03-02. Highest priority: CVE-2024-20089 (score 42/100).
- CVE-2025-20746 MEDIUM 6.7 DOWNGRADE DOWNGRADE In gnss service, there is a possible out of bounds write due to an incorrect bounds check
- CVE-2025-20747 MEDIUM 6.7 DOWNGRADE DOWNGRADE In gnss service, there is a possible out of bounds write due to an incorrect bounds check
- CVE-2025-20722 MEDIUM 5.5 DOWNGRADE MITIGATE In gnss driver, there is a possible out of bounds read due to an integer overflow
- CVE-2026-20435 MEDIUM 4.6 DOWNGRADE DOWNGRADE In preloader, there is a possible read of device unique identifiers due to a logic error
- CVE-2025-20730 MEDIUM 6.7 DOWNGRADE DOWNGRADE In preloader, there is a possible escalation of privilege due to an insecure default value
- CVE-2025-20696 MEDIUM 6.8 DOWNGRADE DOWNGRADE In DA, there is a possible out of bounds write due to a missing bounds check
- CVE-2025-20656 MEDIUM 6.8 DOWNGRADE DOWNGRADE In DA, there is a possible out of bounds write due to a missing bounds check
- CVE-2025-20651 MEDIUM 4.1 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds read due to a missing bounds check
- CVE-2025-20650 MEDIUM 6.8 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds write due to a missing bounds check
- CVE-2025-20635 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
- CVE-2024-20145 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
- CVE-2024-20144 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
- CVE-2024-20143 MEDIUM 6.6 DOWNGRADE DOWNGRADE In V6 DA, there is a possible out of bounds write due to a missing bounds check
- CVE-2024-20136 MEDIUM 6.2 DOWNGRADE MITIGATE In da, there is a possible out of bounds read due to a missing bounds check
- CVE-2024-20107 MEDIUM 6.2 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds read due to a missing bounds check
- CVE-2024-20104 HIGH 8.4 DOWNGRADE DOWNGRADE In da, there is a possible out of bounds write due to a missing bounds check
- CVE-2024-20089 HIGH 7.5 DOWNGRADE DOWNGRADE In wlan, there is a possible denial of service due to incorrect error handling
- CVE-2024-20085 MEDIUM 4.4 DOWNGRADE DOWNGRADE In power, there is a possible out of bounds read due to a missing bounds check
- CVE-2024-20084 MEDIUM 4.4 DOWNGRADE DOWNGRADE In power, there is a possible out of bounds read due to a missing bounds check
FAQ
How do I fix rdkcentral vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rdkcentral being exploited right now?
None of the tracked rdkcentral CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rdkcentral CVE should I patch first?
CVE-2024-20089 currently ranks highest (42/100): In wlan, there is a possible denial of service due to incorrect error handling.