ASR Lapwing_Linux Out-of-Bounds Read Vulnerability in ASR1903 and ASR3901

A high-severity out-of-bounds read vulnerability has been identified in the ASR1903 and ASR3901 products, specifically within the ASR Lapwing_Linux operating system and the nr_fw modules. The issue arises in the program file NrCgi.C, and it affects versions of Lapwing_Linux released prior to November 26, 2025.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially allow an attacker to access memory outside the intended boundaries, possibly leading to information disclosure or other memory-related attacks.