Search

Find a vulnerability

Search criteria

    1 vulnerability found for EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware) by Airoha Technology Corp.

    CVE-2026-89142 (GCVE-0-2026-89142)

    Vulnerability from cvelistv5 – Published: 2026-11-06 03:43 – Updated: 2026-11-10 13:59
    VLAI
    Title
    Out-of-bounds Write in Wi-Fi NPU
    Summary
    In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-11-10 13:59 UTC
    CWE
    Assigner
    Airoha CNA
    References
    Impacted products
    Date Public
    2026-11-06 03:37
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-89142",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-10T13:59:02.879879Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-10T13:59:13.941Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "Wi-Fi NPU FW"
          ],
          "product": "EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware)",
          "vendor": "Airoha Technology Corp.",
          "versions": [
            {
              "lessThanOrEqual": "TLB7.8.0.0_v006",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2026-11-06T03:37:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation."
            }
          ],
          "value": "In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-06T12:04:29.739Z",
        "orgId": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
        "shortName": "Airoha"
      },
      "references": [
        {
          "url": "https://www.airoha.com/product-security-bulletin#CVE-2026-89142"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds Write in Wi-Fi NPU",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
    "assignerShortName": "Airoha",
    "cveId": "CVE-2026-89142",
    "datePublished": "2026-11-06T03:43:17.817Z",
    "dateReserved": "2026-09-11T01:01:59.213Z",
    "dateUpdated": "2026-11-10T13:59:13.941Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}