ASR
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Falcon_Linux、Kestrel、Lapwing_Linux | 10 | – | Jul 1, 2025 |
| Falcon | 4 | – | Apr 16, 2024 |
| Falcon/Crane | 4 | – | Apr 16, 2024 |
| Lapwing_Linux | 2 | – | Apr 30, 2026 |
| Crane，Falcon | 1 | – | Sep 23, 2026 |
| Kestrel | 1 | – | Apr 30, 2026 |
Exploited and recent CVEs
- CVE-2026-42801 Deference after null check in as_rrc 0.3%
- CVE-2026-42800 Deference after null check in ims_client sip 0.2%
- CVE-2026-42799 Out-of-bounds read in ulp 0.3%
- CVE-2025-13735 Out-of-bounds Read in nr flc 0.2%
- CVE-2025-49483 Resource leaks in tr069 0.3%
- CVE-2025-49482 Resource leaks in tr069 0.3%
- CVE-2025-49481 Resource leaks in router 0.3%
- CVE-2025-49480 Out-of-bounds access in lte-telephony 0.3%
- CVE-2025-49488 Resource leaks in router 0.3%
- CVE-2025-49492 Out-of-bounds write in lte-telephony 0.3%
- CVE-2025-49491 Resource leaks in traffic_stat 0.3%
- CVE-2025-49490 Resource leaks in router 0.3%
- CVE-2025-49489 Resource leaks in cm 0.3%
- CVE-2025-5072 Resource leaks in cm 0.3%
- CVE-2024-32625 Uninitialized scalar field 0.4%
- CVE-2024-32634 Logically dead code 0.3%
- CVE-2024-32633 Unsigned compared against 0 0.2%
- CVE-2024-32632 Printf arg type mismatch in ATCMD 0.2%
- CVE-2024-32631 Out-of-bounds read in telephony 0.3%
- CVE-2023-49701 Out-of-bounds access a buffer in SIM management 0.5%
- CVE-2023-49700 Buffer Copy Without Checking size of input in IMS 0.4%
- CVE-2023-49699 Out-of-bounds access a buffer in IMS 0.2%