Out-of-Bounds Write Vulnerability in Wi-Fi NPU Firmware by Airoha
CVE-2026-89142

6.3MEDIUM

Key Information:

Vendor

Airoha Technology Corp.

Status
Wi-fi Npu Fw For En7529, An7552, An7581, An7583
Vendor
CVE Published:
6 November 2026

What is CVE-2026-89142?

An issue has been identified in the Wi-Fi NPU firmware that involves a possible out-of-bounds write due to a failure in the bounds check. This vulnerability could enable a local denial of service affecting system performance. Notably, it requires user execution privileges for exploitation, but does not necessitate user interaction.

Affected Version(s)

Wi-Fi NPU FW for EN7529, AN7552, AN7581, AN7583 0

References

https://www.airoha.com/product-security-bulletin#CVE-2026...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.