Heap-based Buffer Overflow in TP-Link Archer AX53 Affects Device Security
CVE-2025-59487

7.3HIGH

Key Information:

Vendor

Tp-link Systems Inc.

Status
Archer Ax53 V1.0
Vendor
CVE Published:
3 February 2026

What is CVE-2025-59487?

The TP-Link Archer AX53 v1.0 is susceptible to a heap-based buffer overflow vulnerability in its tmpserver modules. Authenticated adjacent attackers can exploit this flaw by sending specially crafted packets that manipulate a critical field offset. This can lead to segmentation faults or arbitrary code execution due to the improper validation of the packet structure, enabling attackers to redirect memory writes. It is essential for users of affected versions to apply patches to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Archer AX53 v1.0 0 <= 1.3.1 Build 20241120

References

https://talosintelligence.com/vulnerability_reports/
https://www.tp-link.com/en/support/download/archer-ax53/v...
patch
https://www.tp-link.com/my/support/download/archer-ax53/v...
patch

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lilith >_> of Cisco Talos
JSON
.