ASR vulnerabilities
We track 6 vulnerabilities in ASR products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 23, 2026.
Latest ASR vulnerabilities
- 7.4 High severity
Crane，Falcon: NULL Pointer Dereference
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.
- 9.8 Critical severity
Kestrel: Out-of-bounds Read
Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.
- 7.4 High severity
Lapwing_Linux: Out-of-bounds Read
Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.
- 9.1 Critical severity
Falcon_Linux、Kestrel、Lapwing_Linux: Out-of-bounds Read
Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.
- 9.8 Critical severity
Falcon_Linux、Kestrel、Lapwing_Linux: Out-of-bounds Write
Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.
- 7.5 High severity
Falcon: Buffer Copy without Checking Size of Input
Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.