ASR Out-of-Bounds Access Vulnerability in LTE Telephony on Falcon Linux, Kestrel, and Lapwing Linux

Vulnerability

A vulnerability allowing out-of-bounds access has been identified in the ASR180x and ASR190x products within the LTE telephony component. This issue arises in the program file 'apps/lzma/src/LzmaEnc.c' and affects several Linux distributions, including Falcon_Linux, Kestrel, and Lapwing_Linux, prior to version 1536.

Impact

Exploitation of this vulnerability leads to out-of-bounds access, which can commonly result in memory corruption or unauthorized memory access.

Added: Jul 1, 2025, 12:24 PM
Updated: Jul 1, 2025, 12:24 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
3.3
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.