{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-89142","assignerOrgId":"34e3dd7a-f061-4e75-a5eb-9fce7dd970ab","state":"PUBLISHED","assignerShortName":"Airoha","dateReserved":"2026-09-11T01:01:59.213Z","datePublished":"2026-11-06T03:43:17.817Z","dateUpdated":"2026-11-06T12:04:29.739Z"},"containers":{"cna":{"providerMetadata":{"orgId":"34e3dd7a-f061-4e75-a5eb-9fce7dd970ab","shortName":"Airoha","dateUpdated":"2026-11-06T12:04:29.739Z"},"title":"Out-of-bounds Write in Wi-Fi NPU","datePublic":"2026-11-06T03:37:00.000Z","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-787","description":"CWE-787 Out-of-bounds write","type":"CWE"}]}],"affected":[{"vendor":"Airoha Technology Corp.","product":"EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware)","modules":["Wi-Fi NPU FW"],"versions":[{"status":"affected","version":"0","lessThanOrEqual":"TLB7.8.0.0_v006","versionType":"custom"}],"defaultStatus":"unknown"}],"descriptions":[{"lang":"en","value":"In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.","supportingMedia":[{"type":"text/html","base64":false,"value":"In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation."}]}],"references":[{"url":"https://www.airoha.com/product-security-bulletin#CVE-2026-89142"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":6.3,"vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H"}}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}}}}