Vendors / Linaro Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 3
Exploited now Linaro records in CISA KEV No Linaro vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02094 · Published 2022-11-18 · No fix listed CWE-94
Priority MEDIUM 43
In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01677 · Published 2022-10-13 · No fix listed CWE-94
Priority MEDIUM 43
An issue was discovered in Linaro LAVA before 2018.5.post1.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02433 · Published 2018-06-19 · No fix listed CWE-20
Priority MEDIUM 42
OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00253 · Published 2026-05-01 · No fix listed CWE-190
Priority LOW 37
Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in compromised private RSA key.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01925 · Published 2018-01-02 · No fix listed CWE-200
Priority LOW 32
An issue was discovered in Linaro LAVA before 2018.5.post1.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01481 · Published 2018-06-19 · No fix listed CWE-20
Priority LOW 31
In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the se…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01068 · Published 2022-11-18 · No fix listed CWE-776
Priority LOW 30
An issue was discovered in Linaro LAVA before 2018.5.post1.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00876 · Published 2018-06-19 · No fix listed CWE-20
Priority LOW 30
Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key.
CVSS 3.0 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01558 · Published 2018-01-02 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
2 3 4 0 0
THREATIST.IORead the docs