CVE-2025-13735

Published: Nov 26, 2025Modified: Jun 17, 2026Deferred

7.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Exploitability: 3.1 / Impact: 3.7

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae (Secondary)

Description

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.asrmicro.com/en/goods/psirt?cid=41

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Timeline

No history available yet.