<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>ASR Microelectronics Co., Ltd. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/asr" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by ASR Microelectronics Co., Ltd. (asr).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/asr.png</url>
      <title>ASR Microelectronics Co., Ltd. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-42801 · 7.4 HIGH — Deference after null check in as_rrc</title>
      <link>https://vulnogram.org/CVE-2026-42801</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-42801</guid>
      <description>NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.</description>
      <category>High</category>
      <pubDate>Wed, 23 Sep 2026 09:03:56 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-42800 · 7.4 HIGH — Deference after null check in ims_client sip</title>
      <link>https://vulnogram.org/CVE-2026-42800</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-42800</guid>
      <description>NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c.</description>
      <category>High</category>
      <pubDate>Thu, 30 Apr 2026 08:52:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-42799 · 7.4 HIGH — Out-of-bounds read in ulp</title>
      <link>https://vulnogram.org/CVE-2026-42799</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-42799</guid>
      <description>Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.</description>
      <category>High</category>
      <pubDate>Thu, 30 Apr 2026 08:36:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-13735 · 7.4 HIGH — Out-of-bounds Read in nr flc</title>
      <link>https://vulnogram.org/CVE-2025-13735</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-13735</guid>
      <description>Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.</description>
      <category>High</category>
      <pubDate>Wed, 26 Nov 2025 06:02:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49483 · 5.4 MEDIUM — Resource leaks in tr069</title>
      <link>https://vulnogram.org/CVE-2025-49483</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49483</guid>
      <description>Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr069_uci.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: befo…</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 11:31:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49482 · 5.4 MEDIUM — Resource leaks in tr069</title>
      <link>https://vulnogram.org/CVE-2025-49482</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49482</guid>
      <description>Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr098.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v…</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 11:28:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49481 · 5.4 MEDIUM — Resource leaks in router</title>
      <link>https://vulnogram.org/CVE-2025-49481</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49481</guid>
      <description>Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pbwork-queue.C. This issue affects Falcon_Linux、Kestrel、Lapw…</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 11:20:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49480 · 7.4 HIGH — Out-of-bounds access in lte-telephony</title>
      <link>https://vulnogram.org/CVE-2025-49480</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49480</guid>
      <description>Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.</description>
      <category>High</category>
      <pubDate>Tue, 01 Jul 2025 11:13:19 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49488 · 5.4 MEDIUM — Resource leaks in router</title>
      <link>https://vulnogram.org/CVE-2025-49488</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49488</guid>
      <description>Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Lin…</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 11:03:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49492 · 7.4 HIGH — Out-of-bounds write in lte-telephony</title>
      <link>https://vulnogram.org/CVE-2025-49492</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49492</guid>
      <description>Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.</description>
      <category>High</category>
      <pubDate>Tue, 01 Jul 2025 10:52:32 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49491 · 5.4 MEDIUM — Resource leaks in traffic_stat</title>
      <link>https://vulnogram.org/CVE-2025-49491</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49491</guid>
      <description>Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (traffic_stat modules) allows Resource Leak Exposure. This vulnerability is associated with program files traffic_stat/traffic_service/traffic_serv…</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 10:36:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49490 · 5.4 MEDIUM — Resource leaks in router</title>
      <link>https://vulnogram.org/CVE-2025-49490</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49490</guid>
      <description>Resource leak vulnerability in ASR180x in router allows Resource Leak Exposure. This vulnerability is associated with program files router/sms/sms.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 09:56:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-49489 · 5.4 MEDIUM — Resource leaks in cm</title>
      <link>https://vulnogram.org/CVE-2025-49489</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-49489</guid>
      <description>Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (con_mgr components) allows Resource Leak Exposure. This vulnerability is associated with program files con_mgr/dialer_task.C. This issue affects F…</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 09:45:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-5072 · 5.4 MEDIUM — Resource leaks in cm</title>
      <link>https://vulnogram.org/CVE-2025-5072</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-5072</guid>
      <description>Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.</description>
      <category>Medium</category>
      <pubDate>Tue, 01 Jul 2025 08:55:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-32625 · 5.8 MEDIUM — Uninitialized scalar field</title>
      <link>https://vulnogram.org/CVE-2024-32625</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-32625</guid>
      <description>In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations</description>
      <category>Medium</category>
      <pubDate>Tue, 16 Apr 2024 09:00:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-32634 · 6.1 MEDIUM — Logically dead code</title>
      <link>https://vulnogram.org/CVE-2024-32634</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-32634</guid>
      <description>In huge memory get unmapped area check, code can never be reached because of a logical contradiction.</description>
      <category>Medium</category>
      <pubDate>Tue, 16 Apr 2024 08:57:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-32633 · 4 MEDIUM — Unsigned compared against 0</title>
      <link>https://vulnogram.org/CVE-2024-32633</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-32633</guid>
      <description>An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.</description>
      <category>Medium</category>
      <pubDate>Tue, 16 Apr 2024 08:54:53 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-32632 · 6.6 MEDIUM — Printf arg type mismatch in ATCMD</title>
      <link>https://vulnogram.org/CVE-2024-32632</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-32632</guid>
      <description>A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access</description>
      <category>Medium</category>
      <pubDate>Tue, 16 Apr 2024 08:51:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2024-32631 · 7.2 HIGH — Out-of-bounds read in telephony</title>
      <link>https://vulnogram.org/CVE-2024-32631</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2024-32631</guid>
      <description>Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.</description>
      <category>High</category>
      <pubDate>Tue, 16 Apr 2024 08:44:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-49701 · 7.2 HIGH — Out-of-bounds access a buffer in SIM management</title>
      <link>https://vulnogram.org/CVE-2023-49701</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-49701</guid>
      <description>Memory Corruption in SIM management while USIMPhase2init</description>
      <category>High</category>
      <pubDate>Thu, 30 Nov 2023 07:15:14 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-49700 · 6.7 MEDIUM — Buffer Copy Without Checking size of input in IMS</title>
      <link>https://vulnogram.org/CVE-2023-49700</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-49700</guid>
      <description>Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.</description>
      <category>Medium</category>
      <pubDate>Thu, 30 Nov 2023 07:12:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-49699 · 6.7 MEDIUM — Out-of-bounds access a buffer in IMS</title>
      <link>https://vulnogram.org/CVE-2023-49699</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-49699</guid>
      <description>Memory Corruption in IMS while calling VoLTE Streamingmedia Interface</description>
      <category>Medium</category>
      <pubDate>Thu, 30 Nov 2023 07:04:48 GMT</pubDate>
    </item>
  </channel>
</rss>
