CVE-2025-49492: high-severity vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux
Out-of-bounds write in lte-telephony
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.4epss 0.3%
Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C.
This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Affected products
ASR · Falcon_Linux、Kestrel、Lapwing_LinuxRelated CVEs — ASR Falcon_Linux、Kestrel、Lapwing_Linux
In the same product, most dangerous first.
CVE-2025-49483MEDIUMResource leaks in tr069EPSS 0.3%CVE-2025-49482MEDIUMResource leaks in tr069EPSS 0.3%CVE-2025-49480HIGHOut-of-bounds access in lte-telephonyEPSS 0.3%CVE-2025-49481MEDIUMResource leaks in routerEPSS 0.3%CVE-2025-49488MEDIUMResource leaks in routerEPSS 0.3%CVE-2025-49491MEDIUMResource leaks in traffic_statEPSS 0.3%