Linuxfoundation

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-52727 1Linuxfoundation 1Onos Lib Go Jun 17, 2026 Apr 30, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.
CVE-2023-52726 1Linuxfoundation 1Onos Ric Sdk Go Jun 17, 2026 Apr 30, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe function implementation for the subscribed indication stream).
CVE-2023-52725 1Linuxfoundation 1Onos Kpimon Jun 17, 2026 Apr 30, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package.
CVE-2023-52724 1Linuxfoundation 1Onos Kpimon Jun 17, 2026 Apr 30, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function.
CVE-2024-31584 1Linuxfoundation 1Pytorch Jun 17, 2026 Apr 19, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
CVE-2024-31583 1Linuxfoundation 1Pytorch Jun 17, 2026 Apr 17, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
CVE-2024-31580 1Linuxfoundation 1Pytorch Jun 17, 2026 Apr 17, 2024 N/A· v4 4.0 MEDIUM· v3 N/A· v2 PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted in...Show more PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.Show less
CVE-2024-20055 3Google LinuxfoundationMediatek 3Android Iot YoctoYocto Jun 17, 2026 Apr 1, 2024 N/A· v4 6.3 MEDIUM· v3 N/A· v2 In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Pa...Show more In imgsys, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation Patch ID: ALPS08518692; Issue ID: MSV-1012.Show less
CVE-2024-20054 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Apr 1, 2024 N/A· v4 6.6 MEDIUM· v3 N/A· v2 In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitatio...Show more In gnss, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08580200; Issue ID: ALPS08580200.Show less
CVE-2024-20053 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Apr 1, 2024 N/A· v4 8.4 HIGH· v3 N/A· v2 In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541764.Show less
CVE-2024-20052 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Apr 1, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...Show more In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541761.Show less
CVE-2024-20051 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Apr 1, 2024 N/A· v4 2.3 LOW· v3 N/A· v2 In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALP...Show more In flashc, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541758.Show less
CVE-2024-20050 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Apr 1, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...Show more In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541757; Issue ID: ALPS08541757.Show less
CVE-2024-20049 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Apr 1, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...Show more In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541765; Issue ID: ALPS08541765.Show less
CVE-2024-20040 5Google LinuxLinuxfoundation+2 more 5Android Linux KernelOpenwrt+2 more Jun 17, 2026 Apr 1, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed...Show more In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 (for MT6XXX chipsets) / WCNCR00363530 (for MT79XX chipsets); Issue ID: MSV-979.Show less
CVE-2023-51699 1Linuxfoundation 1Fluid Jun 17, 2026 Mar 15, 2024 N/A· v4 6.0 MEDIUM· v3 N/A· v2 Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially...Show more Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRuntime can potentially allow an authenticated user, who has the authority to create or update the K8s CRD Dataset/JuicefsRuntime, to execute arbitrary OS commands within the juicefs related containers. This could lead to unauthorized access, modification or deletion of data. Users who're using versions < 0.9.3 with JuicefsRuntime should upgrade to v0.9.3.Show less
CVE-2024-21418 1Linuxfoundation 1Software For Open Networking In The Cloud Jun 17, 2026 Mar 12, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
CVE-2024-20023 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdk B+1 more Jun 17, 2026 Mar 4, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Pat...Show more In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.Show less
CVE-2024-20022 4Google LinuxfoundationOpenwrt+1 more 4Android OpenwrtRdkb+1 more Jun 17, 2026 Mar 4, 2024 N/A· v4 6.7 MEDIUM· v3 N/A· v2 In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation....Show more In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.Show less
CVE-2024-27319 2Fedoraproject Linuxfoundation 2Fedora Onnx Jun 17, 2026 Feb 23, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Versions of the package onnx before and including 1.15.0 are vulnerable to Out-of-bounds Read as the ONNX_ASSERT and ONNX_ASSERTM functions have an off by one string copy.

Previous 1...131415...28 Next