CVE-2026-89142

Full vulnerability record from the local CVENow database.

Description

In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.

Severity

MEDIUM

CVSS score

6.3 (v3.1)

Vulnerability status

Received

Source identifier

34e3dd7a-f061-4e75-a5eb-9fce7dd970ab

Published

2026-11-06 04:16:35.437000

Last modified

2026-11-06 05:18:39.680000

View original CVE JSON

{
  "id": "CVE-2026-89142",
  "sourceIdentifier": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
  "published": "2026-11-06T04:16:35.437",
  "lastModified": "2026-11-06T05:18:39.680",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation."
    }
  ],
  "affected": [
    {
      "source": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
      "affectedData": [
        {
          "vendor": "Airoha Technology Corp.",
          "product": "Wi-Fi NPU FW for EN7529, AN7552, AN7581, AN7583",
          "defaultStatus": "unknown",
          "modules": [
            "Wi-Fi NPU FW"
          ],
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "TLB7.8.0.0_v006",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
          "baseScore": 6.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.1,
        "impactScore": 4.2
      }
    ]
  },
  "weaknesses": [
    {
      "source": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.airoha.com/product-security-bulletin#CVE-2026-89142",
      "source": "34e3dd7a-f061-4e75-a5eb-9fce7dd970ab"
    }
  ]
}