CVE-2025-13735
BaseFortify
Publication date: 2025-11-26
Last updated on: 2025-11-26
Assigner: ASR Microelectronics Co., Ltd.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| lapwing_linux | lapwing_linux | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Out-of-bounds Read in the ASR1903 and ASR3901 devices running ASR Lapwing_Linux on Linux, specifically in the nr_fw modules related to the program files Code/nr_fw/DLP/src/NrCgi.C. It occurs when the software reads data outside the intended memory boundaries, which can lead to unexpected behavior or crashes.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing an attacker with low privileges to exploit the out-of-bounds read, potentially causing information disclosure, integrity loss, or availability issues on affected systems. The CVSS score of 7.4 indicates a high severity with possible impacts on confidentiality, integrity, and availability.