Search

Find a vulnerability

Search criteria

    1 vulnerability

    CVE-2026-89142 (GCVE-0-2026-89142)

    Vulnerability from cvelistv5 – Published: 2026-11-06 03:43 – Updated: 2026-11-06 12:04
    VLAI
    Title
    Out-of-bounds Write in Wi-Fi NPU
    Summary
    In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.
    Severity
    6.3 (Medium)
    CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
    CWE
    Assigner
    Airoha CNA under the mitre root
    CNA scorecard – unranked: 1 record in the last 180 days, 10 needed details
    References
    Impacted products
    Date Public
    2026-11-06 03:37
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "modules": [
            "Wi-Fi NPU FW"
          ],
          "product": "EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware)",
          "vendor": "Airoha Technology Corp.",
          "versions": [
            {
              "lessThanOrEqual": "TLB7.8.0.0_v006",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2026-11-06T03:37:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation."
            }
          ],
          "value": "In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-06T12:04:29.739Z",
        "orgId": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
        "shortName": "Airoha"
      },
      "references": [
        {
          "url": "https://www.airoha.com/product-security-bulletin#CVE-2026-89142"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds Write in Wi-Fi NPU",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
    "assignerShortName": "Airoha",
    "cveId": "CVE-2026-89142",
    "datePublished": "2026-11-06T03:43:17.817Z",
    "dateReserved": "2026-09-11T01:01:59.213Z",
    "dateUpdated": "2026-11-06T12:04:29.739Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}