CVE Program partner
ASR
ASR Microelectronics Co., Ltd.
CVEs, 365 days422 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
| Organisation | ASR Microelectronics Co., Ltd. |
| Role | CNA |
| Type | Vendor |
| Reports to | icscert → CISA |
| Scope | ASR products only. |
| Advisories | https://www.asrmicro.com/en/goods/psirt |
Latest CVEs · RSS
- CVE-2026-42801 2026-09-23 · CVSS 7.4NULL pointer dereference vulnerability in ASR Crane,Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program
- CVE-2026-42800 2026-04-30 · CVSS 7.4NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associ
- CVE-2026-42799 2026-04-30 · CVSS 7.4Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/
- CVE-2025-13735 2025-11-26 · CVSS 7.4Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_f
- CVE-2025-49483 2025-07-01 · CVSS 5.4Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with p
- CVE-2025-49482 2025-07-01 · CVSS 5.4Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with p
- CVE-2025-49481 2025-07-01 · CVSS 5.4Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with p
- CVE-2025-49480 2025-07-01 · CVSS 7.4Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Fa
- CVE-2025-49488 2025-07-01 · CVSS 5.4Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated
- CVE-2025-49492 2025-07-01 · CVSS 7.4Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_ap
- CVE-2025-49491 2025-07-01 · CVSS 5.4Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (traffic_stat modules) allows Resource Leak Exposure. Thi
- CVE-2025-49490 2025-07-01 · CVSS 5.4Resource leak vulnerability in ASR180x in router allows Resource Leak Exposure. This vulnerability is associated with program files router/sms/sms.c. This is
- CVE-2025-49489 2025-07-01 · CVSS 5.4Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (con_mgr components) allows Resource Leak Exposure. Thi
- CVE-2025-5072 2025-07-01 · CVSS 5.4Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.
- CVE-2024-32625 2024-04-16 · CVSS 5.8In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations
- CVE-2024-32634 2024-04-16 · CVSS 6.1In huge memory get unmapped area check, code can never be reached because of a logical contradiction.
- CVE-2024-32633 2024-04-16 · CVSS 4.0An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
- CVE-2024-32632 2024-04-16 · CVSS 6.6A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access
- CVE-2024-32631 2024-04-16 · CVSS 7.2Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.
- CVE-2023-49701 2023-11-30 · CVSS 7.2Memory Corruption in SIM management while USIMPhase2init
- CVE-2023-49700 2023-11-30 · CVSS 6.7Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too la
- CVE-2023-49699 2023-11-30 · CVSS 6.7Memory Corruption in IMS while calling VoLTE Streamingmedia Interface