Skip to content
OpenAdvisories
High · 7.7 CVE-2025-15608 EUVD-2025-208907GHSA-6mh6-q22w-5c4p

Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55

Published Mar 20, 2026 · Updated Aug 12, 2026 · Assigned by TPLink

Description

This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques.

Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.

Affected products

VendorProductAffectedFixed
TP-Link Systems AX53 v1 < 251029 251029
TP-Link Systems AX55 v4 < (US)_1.2.1 Build 20260527 (US)_1.2.1 Build 20260527
TP-Link Systems AX55 v4.6 < (US)_1.2.1 Build 20260527 (US)_1.2.1 Build 20260527

References