CVE-2026-42799

Published: Apr 30, 2026Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.

Affected (1)

Products: Asrmicro: Asr1803 Firmware

Asrmicro

1 product

Asr1803 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Asrmicro Asr1803 Firmware	Before 1.216.002

Running on/with	Platform Versions
Asrmicro Asr1803	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.asrmicro.com/en/goods/psirt?cid=44

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Vendor Advisory

Timeline

No history available yet.