CVE-2026-42801

Published: Sep 23, 2026Modified: Sep 23, 2026Deferred

7.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Exploitability: 3.1 / Impact: 3.7

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae (Secondary)

Description

NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (1)

https://www.asrmicro.com/en/goods/psirt?cid=45

Source: 68630edc-a58c-4cbd-9b01-0e130455c8ae

Timeline

No history available yet.