CVE-2025-49480

Published: January 7, 2025
Out-of-bounds access in ASR180x 、ASR190x in lte-telephony, This vulnerability is associated with program files apps/lzma/src/LzmaEnc.c. This issue affects Falcon_Linux、Kestrel、Lapwing_Linux: before v1536.
HIGH
CVSS v3: 7.4

Status

DocFilters Release Package State Justification Comment
22.3 lzma (17.01) Needs Triage
22.2 lzma (17.01) Needs Triage
22.1 lzma (17.01) Needs Triage
21.11.1 lzma (17.01) Needs Triage
21.11 lzma (17.01) Needs Triage
21.8.1 lzma (17.01) Needs Triage
21.8 lzma (17.01) Needs Triage
21.5.1 lzma (17.01) Needs Triage
21.5.0 lzma (17.01) Needs Triage
21.2.0 lzma (17.01) Needs Triage
11.4.20 lzma (17.01) Needs Triage
11.4.19.3667 lzma (17.01) Needs Triage
11.4.18.3599 lzma (17.01) Needs Triage
11.4.17 lzma (17.01) Needs Triage
11.4.16.3445 lzma (17.01) Needs Triage
11.4.15.3368 lzma (17.01) Needs Triage
11.4.14.3263 lzma (17.01) Needs Triage
11.4.13.3179 lzma (17.01) Needs Triage
11.4.12.3054 lzma (17.01) Needs Triage
11.4.11.3040 lzma (17.01) Needs Triage
11.4.11.2990 lzma (17.01) Needs Triage
11.4.10.2934 lzma (17.01) Needs Triage
11.4.9.2878 lzma (17.01) Needs Triage
11.4.8.2822 lzma (17.01) Needs Triage

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
LOW
Base Score
7.4
Base Severity
HIGH
Confidentiality Impact
LOW
Integrity Impact
LOW
Privileges Required
LOW
Scope
CHANGED
User Interaction
NONE
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Version
3.1

References