Vendors / ASR Records 22 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4 CVSS 9.0–10.0
CVSS high 6 CVSS 7.0–8.9
Exploited now ASR records in CISA KEV No ASR vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
Memory Corruption in SIM management while USIMPhase2init
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0049 · Published 2023-11-30 · Fixed CWE-119
Priority MEDIUM 42
Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00277 · Published 2026-04-30 · Fixed in 2026/02/10 CWE-125
Priority LOW 35
Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.
CVSS 3.1 HIGH 8.0· Network · High privileges · No interaction · EPSS 0.00334 · Published 2024-04-16 · Fixed in CP01.057.067 CWE-125
Priority LOW 33
Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0038 · Published 2023-11-30 · Fixed CWE-120
Priority LOW 33
Memory Corruption in IMS while calling VoLTE Streamingmedia Interface
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0019 · Published 2023-11-30 · Fixed CWE-119
Priority LOW 29
A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access
CVSS 3.1 MEDIUM 6.6· Adjacent network · No auth · User interaction · EPSS 0.00226 · Published 2024-04-16 · Fixed in CP01.057.067 CWE-686
Priority LOW 27
In huge memory get unmapped area check, code can never be reached because of a logical contradiction.
CVSS 3.1 MEDIUM 6.1· Physical · No auth · No interaction · EPSS 0.00266 · Published 2024-04-16 · Fixed in CP01.057.067 CWE-561
Priority LOW 26
In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations
CVSS 3.1 MEDIUM 5.8· Network · High privileges · No interaction · EPSS 0.00417 · Published 2024-04-16 · Fixed in CP01.057.067 CWE-457
Priority LOW 18
An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.
CVSS 3.1 MEDIUM 4.0· Physical · No auth · No interaction · EPSS 0.00234 · Published 2024-04-16 · Fixed in CP01.057.067 CWE-570
Open these records in search → All records by CVSS severity
Critical4 High6 Medium12 Low0 No CVSS0