The Linux Foundation Yocto

Name: The Linux Foundation Yocto
Brand: The Linux Foundation

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high10medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-20147US	—	0.21% (12th)	—	no fix	2025-02-03	3 versions
CVE-2024-20146US	—	0.14% (3rd)	—	no fix	2025-01-06	3 versions
CVE-2025-20656US	—	0.12% (2nd)	—	no fix	2025-04-07	≤ 4.0
CVE-2023-20802US	medium6.5	0.10% (1st)	—	no fix	2023-08-07	≤ 4.0
CVE-2023-32810US	medium4.4	0.10% (1st)	—	no fix	2023-09-04	3 versions
CVE-2023-20800US	medium6.5OT elevated	0.10% (1st)	—	no fix	2023-08-07	≤ 4.0
CVE-2023-20805US	medium6.7	0.10% (1st)	—	no fix	2023-08-07	≤ 4.0
CVE-2023-20804US	medium6.7	0.10% (1st)	—	no fix	2023-08-07	≤ 4.0
CVE-2023-20803US	medium6.5	0.09% (1st)	—	no fix	2023-08-07	≤ 4.0
CVE-2023-20812US	medium4.4	0.09% (0th)	—	no fix	2023-08-07	≤ 4.0
CVE-2023-20790US	medium4.4	0.09% (0th)	—	no fix	2023-08-07	2 versions
CVE-2023-20796US	medium4.4	0.09% (0th)	—	no fix	2023-08-07	2 versions
CVE-2024-20104US	—	0.09% (0th)	—	no fix	2024-11-04	≤ 4.0
CVE-2023-20801US	medium6.4	0.07% (0th)	—	no fix	2023-08-07	≤ 4.0

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write10 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-416Use After Free1 CVEs
CWE-617Reachable Assertion1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.