CVE-2020-28951

CRITICAL · CVSS 9.8 EPSS 1.74%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-11-19 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-28951

Severity

CRITICAL

CVSS

9.8

EPSS

1.74%

Original NVD Description

libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.