CVE-2025-49492: Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associat

Q: How do I fix CVE-2025-49492?

falcon linux: upgrade to 1536; kestrel: upgrade to 1536; lapwing linux: upgrade to 1536. Exact commands for each OS are on this page.

Q: Is CVE-2025-49492 being exploited?

CVE-2025-49492 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2025-49492 affect?

CVE-2025-49492 affects falcon linux, kestrel, lapwing linux. Severity is high (CVSS 7.4). Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

Q: How urgent is CVE-2025-49492?

Priority 37/100. High severity; On your watchlist

Routine

HIGH 7.4WATCHLISTUPGRADEUPGRADEUPGRADE

CVE-2025-49492 is a high-severity flaw (CVSS 7.4) affecting falcon linux, kestrel, lapwing linux. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

Why this priority

High severity
On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score	7.4 (High)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.3% (top 77%)
CISA exploited list	No
Weakness	CWE-787
Published	2025-07-01
Last modified	2026-06-17

Publisher (CNA): ASR Microelectronics Co., Ltd. · Vendor: asrmicro

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-07-01 11:15 UTCPublished CVE record published
2026-06-17 09:31 UTCUpdated Record last modified

asrmicro falcon linux UPGRADE

Affected: < 1536

Fixed in: 1536

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

asrmicro kestrel UPGRADE

Affected: < 1536

Fixed in: 1536

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

asrmicro lapwing linux UPGRADE

Affected: < 1536

Fixed in: 1536

Safe to downgrade to: no unaffected older release

Check your OS release

cat /etc/os-release; uname -r

Debian / Ubuntu

sudo apt update && sudo apt full-upgrade

RHEL / Amazon Linux / Fedora

sudo dnf upgrade --refresh

Windows

Install the latest cumulative update from Windows Update

If no patch exists yet

OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-49492?

falcon linux: upgrade to 1536; kestrel: upgrade to 1536; lapwing linux: upgrade to 1536. Exact commands for each OS are on this page.

Is CVE-2025-49492 being exploited?

CVE-2025-49492 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-49492 affect?

CVE-2025-49492 affects falcon linux, kestrel, lapwing linux. Severity is high (CVSS 7.4). Out-of-bounds write in ASR180x in lte-telephony, May cause a buffer underrun. This vulnerability is associated with program files apps/atcmd_server/src/dev_api.C. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.

How urgent is CVE-2025-49492?

Priority 37/100. High severity; On your watchlist

Related CVEs

CVE-2025-5072 MEDIUM 5.4 UPGRADE UPGRADE Resource leak vulnerability in ASR180x、ASR190x in con_mgr allows Resource Leak Exposure.This issue affects Fal
CVE-2025-49491 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (traffi
CVE-2025-49490 MEDIUM 5.4 UPGRADE UPGRADE Resource leak vulnerability in ASR180x in router allows Resource Leak Exposure. This vulnerability is associa
CVE-2025-49489 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR Falcon_Linux、Kestrel、Lapwing_Linux on Linux (con_mg
CVE-2025-49488 MEDIUM 5.4 UPGRADE UPGRADE Improper Resource Shutdown or Release vulnerability in ASR180x 、ASR190x in router components allows Resour

References

← Back to latest CVEs