CyberSecBulletin

Yoctoproject vulnerabilities

We track 2 vulnerabilities in Yoctoproject products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 19, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Yoctoproject vulnerabilities

  • 9.8 Critical severity

    poky: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-25626YoctoprojectEPSS 1.21%

    Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware architecture. In Yocto Projects Bitbake before 2.6.2 (before and included Yocto Project 4.3.1), with the Toaster server (in

  • 9.8 Critical severity

    MT6580, MT6735, MT6737, MT6739, MT6750S…: Out-of-bounds Write

    CVE-2022-26447MediaTek

    In BT firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06784478; Issue ID: A