Windriver vulnerabilities
We track 2 vulnerabilities in Windriver products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 15, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Windriver vulnerabilities
- 7.5 High severity
vxworks: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak.
- 8.8 High severity
vxworks: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements TAR file extraction and thereby also processes files within an archive that have relative or absolute file paths. A developer using the "tarExtract" function may ex