Out-of-Bounds Write Vulnerability in ASUS Router Firmware
CVE-2026-84729

7.2HIGH

Key Information:

Vendor

Asus
Status
Router Firmware
Vendor
CVE Published:
4 November 2026

What is CVE-2026-84729?

The vulnerability in specific ASUS Router firmware versions allows an unauthenticated attacker within proximity to exploit the device. By sending a specially crafted packet, an attacker can write data beyond the allocated buffer. This weakness can lead to local data corruption and may permit a denial-of-service condition, potentially destabilizing the router's normal operations. For detailed information, refer to the ASUS security advisory.

Affected Version(s)

Router firmware ASUSWRT 3.0.0.4_386 series

Router firmware ASUSWRT 3.0.0.4_388 series

Router firmware ASUSWRT 3.0.0.6_102 series

References

https://www.asus.com/security-advisory

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.