PatchTheCVEyoctoproject vulnerabilities
Recent CVEs affecting yoctoproject products. 20 tracked.
yoctoproject has 20 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-15. Highest priority: CVE-2022-26447 (score 53/100).
- CVE-2023-20721 MEDIUM 6.7 MITIGATE MITIGATE In isp, there is a possible out of bounds write due to improper input validation
- CVE-2023-20718 MEDIUM 6.7 MITIGATE MITIGATE In vcu, there is a possible out of bounds write due to a missing bounds check
- CVE-2023-20682 MEDIUM 6.7 MITIGATE MITIGATE In wlan, there is a possible out of bounds write due to an integer overflow
- CVE-2023-20679 MEDIUM 4.4 MITIGATE MITIGATE In wlan, there is a possible out of bounds read due to a missing bounds check
- CVE-2023-20677 MEDIUM 4.4 MITIGATE MITIGATE In wlan, there is a possible out of bounds read due to a missing bounds check
- CVE-2023-20676 MEDIUM 4.4 MITIGATE MITIGATE In wlan, there is a possible out of bounds read due to a missing bounds check
- CVE-2023-20675 MEDIUM 4.4 MITIGATE MITIGATE In wlan, there is a possible out of bounds read due to a missing bounds check
- CVE-2023-20674 MEDIUM 4.4 MITIGATE MITIGATE In wlan, there is a possible out of bounds read due to a missing bounds check
- CVE-2023-20663 MEDIUM 6.7 MITIGATE MITIGATE In wlan, there is a possible out of bounds write due to an integer overflow
- CVE-2023-20662 MEDIUM 6.7 MITIGATE MITIGATE In wlan, there is a possible out of bounds write due to an integer overflow
- CVE-2023-20661 MEDIUM 6.7 MITIGATE MITIGATE In wlan, there is a possible out of bounds write due to an integer overflow
- CVE-2023-20660 MEDIUM 4.4 MITIGATE MITIGATE In wlan, there is a possible out of bounds read due to an integer overflow
- CVE-2023-20659 MEDIUM 6.7 MITIGATE MITIGATE In wlan, there is a possible out of bounds write due to a missing bounds check
- CVE-2023-20623 MEDIUM 6.4 MITIGATE MITIGATE In ion, there is a possible escalation of privilege due to improper locking
- CVE-2022-32633 MEDIUM 6.7 MITIGATE MITIGATE In Wi-Fi, there is a possible memory access violation due to a logic error
- CVE-2022-32632 MEDIUM 6.7 MITIGATE MITIGATE In Wi-Fi, there is a possible out of bounds write due to improper input validation
- CVE-2022-32631 MEDIUM 6.7 MITIGATE MITIGATE In Wi-Fi, there is a possible out of bounds write due to improper input validation
- CVE-2022-26466 MEDIUM 6.7 MITIGATE MITIGATE In audio ipi, there is a possible out of bounds write due to an integer overflow
- CVE-2022-26465 MEDIUM 6.7 MITIGATE MITIGATE In audio ipi, there is a possible out of bounds write due to an incorrect bounds check
- CVE-2022-26447 CRITICAL 9.8 MITIGATE MITIGATE In BT firmware, there is a possible out of bounds write due to a missing bounds check
FAQ
How do I fix yoctoproject vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is yoctoproject being exploited right now?
None of the tracked yoctoproject CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which yoctoproject CVE should I patch first?
CVE-2022-26447 currently ranks highest (53/100): In BT firmware, there is a possible out of bounds write due to a missing bounds check.