What’s Vulnerable › Vulnerabilities

CVE-2025-13735: Out-of-bounds Read in nr flc

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-26 · updated 2026-06-17
• Weakness: CWE-125

Description

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.

Affected products

• ASR Lapwing_Linux: before 2025/11/26 — fixed in 2025/11/26

How to fix

Upgrade to a fixed version: ASR Lapwing_Linux 2025/11/26. Check the vendor advisory for mitigations.

References

• https://www.asrmicro.com/en/goods/psirt?cid=41

Get alerted when CVE-2025-13735 or the next vulnerability affects your stack