CyberSecBulletin

Asrmicro vulnerabilities

We track 4 vulnerabilities in Asrmicro products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2026.

4vulnerabilities
3critical
1high
0exploited
9.1average CVSS score

Latest Asrmicro vulnerabilities

  • 9.8 Critical severity

    Kestrel: Out-of-bounds Read

    CVE-2026-42799ASR

    Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.

  • 9.1 Critical severity

    Falcon_Linux、Kestrel、Lapwing_Linux: Out-of-bounds Read

    CVE-2025-49480ASR

    Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • 9.8 Critical severity

    Falcon_Linux、Kestrel、Lapwing_Linux: Out-of-bounds Write

    CVE-2025-49492ASR

    Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • 7.5 High severity

    Falcon: Buffer Copy without Checking Size of Input

    CVE-2023-49700ASR

    Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.