Skip to content
OpenAdvisories

Vendor

ASR

22 known vulnerabilities.

ASR at a glance

Last 12 months
4
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 2 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202610
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202620
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202510
Oct 202500
Sep 202500
Aug 202500
Jul 2025100
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

22 results · Feed

  • High 7.4

    Deference after null check in as_rrc

    NULL pointer dereference vulnerability in ASR Crane,Falcon on Linux (as_rrc module) allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c.

  • High 7.4

    Deference after null check in ims_client sip

    NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files sip/utils/src/sipuri.c.

  • High 7.4

    Out-of-bounds read in ulp

    Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel: before 2026/02/10.

  • High 7.4

    Out-of-bounds Read in nr flc

    Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C. This issue affects Lapwing_Linux: before 2025/11/26.

  • Medium 5.4

    Resource leaks in tr069

    Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr069_uci.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • Medium 5.4

    Resource leaks in tr069

    Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in tr069 modules allows Resource Leak Exposure. This vulnerability is associated with program files tr069/tr098.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • Medium 5.4

    Resource leaks in router

    Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router modules allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pbwork-queue.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux…

  • High 7.4

    Out-of-bounds access in lte-telephony

    Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • Medium 5.4

    Resource leaks in router

    Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resource Leak Exposure. This vulnerability is associated with program files router/phonebook/pb.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: befor…

  • High 7.4

    Out-of-bounds write in lte-telephony

    Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun.  This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • Medium 5.4

    Resource leaks in traffic_stat

    Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (traffic_stat modules) allows Resource Leak Exposure. This vulnerability is associated with program files traffic_stat/traffic_service/traffic_service.C. Th…

  • Medium 5.4

    Resource leaks in router

    Resource leak vulnerability in ASR180x in router allows Resource Leak Exposure. This vulnerability is associated with program files router/sms/sms.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • Medium 5.4

    Resource leaks in cm

    Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (con_mgr components) allows Resource Leak Exposure. This vulnerability is associated with program files con_mgr/dialer_task.C. This issue affects Falcon_Lin…

  • Medium 5.4

    Resource leaks in cm

    Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

  • Medium 5.8

    Uninitialized scalar field

    In OffloadAMRWriter, a scalar field is not initialized so will contain an arbitrary value left over from earlier computations

  • Medium 6.1

    Logically dead code

    In huge memory get unmapped area check, code can never be reached because of a logical contradiction.

  • Medium 4.0

    Unsigned compared against 0

    An unsigned value can never be negative, so eMMC full disk test will always evaluate the same way.

  • Medium 6.6

    Printf arg type mismatch in ATCMD

    A value in ATCMD will be misinterpreted by printf, causing incorrect output and possibly out-of-bounds memory access

  • High 7.2

    Out-of-bounds read in telephony

    Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incorrect computations.

  • High 7.2

    Out-of-bounds access a buffer in SIM management

    Memory Corruption in SIM management while USIMPhase2init

  • Medium 6.7

    Buffer Copy Without Checking size of input in IMS

    Security best practices violations, a string operation in Streamingmedia will write past the end of fixed-size destination buffer if the source buffer is too large.

  • Medium 6.7

    Out-of-bounds access a buffer in IMS

    Memory Corruption in IMS while calling VoLTE Streamingmedia Interface