CVE-2025-49480

Published: Jul 1, 2025Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

Affected (3)

Products: Asrmicro: Falcon Linux, Kestrel, Lapwing Linux

3 products

Configuration A

3 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Asrmicro Falcon Linux	Before 1536
Asrmicro Kestrel	Before 1536
Asrmicro Lapwing Linux	Before 1536

Running on/with	Platform Versions
Asrmicro Asr1803	All versions
Asrmicro Asr1806	All versions
Asrmicro Asr1901	All versions
Asrmicro Asr1903	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.asrmicro.com/en/goods/psirt?cid=40

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

Timeline

No history available yet.