Heap-Based Buffer Overflow in TP-Link Archer AX53 by TP-Link
CVE-2025-62405

7.3HIGH

Key Information:

Vendor

Tp-link Systems Inc.

Status
Archer Ax53 V1.0
Vendor
CVE Published:
3 February 2026

What is CVE-2025-62405?

A heap-based buffer overflow vulnerability exists in TP-Link Archer AX53 v1.0 (tmpserver modules). This flaw allows authenticated adjacent attackers to exploit the device by sending a specially crafted network packet that exceeds the expected length of a specific field. The result of this vulnerability can lead to a segmentation fault and potentially allow the attacker to execute arbitrary code on the device. Users are advised to update their firmware to the latest version to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Archer AX53 v1.0 0 <= 1.3.1 Build 20241120

References

https://talosintelligence.com/vulnerability_reports/
https://www.tp-link.com/en/support/download/archer-ax53/v...
patch
https://www.tp-link.com/my/support/download/archer-ax53/v...
patch

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lilith >_> of Cisco Talos
JSON
.