CVE-2025-15608

Niewłaściwa walidacja danych w AX53 v1 prowadzi do przepełnienia bufora, co może skutkować zdalnym wykonaniem kodu i awarią usługi.

This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques. Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.