Out-of-bounds Read Vulnerability in ASR Kestrel by ASR Micro

CVE-2026-42799

What is CVE-2026-42799?

The ASR Kestrel product contains an out-of-bounds read vulnerability within the nr_fw module that may lead to overflow buffers. This flaw impacts program execution and could allow an attacker to exploit the logic of the application, potentially leading to unauthorized data exposure. Affected versions of ASR Kestrel must be updated before February 10, 2026, to mitigate this risk effectively. Organizations using this product should prioritize assessing their installations to prevent potential exploitation.

References