xrv7209_firmware vulnerabilities
CVEs whose affected-version data names the xrv7209_firmware package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
8 CVEsRSS
CVE-2026-57537High· 7.8Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.
CVE-2026-25302High· 7.1Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
CVE-2026-24081High· 7.4Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.
CVE-2026-25294High· 7.4Transient DOS while parsing frame during channel usage.
Transient DOS while parsing frame during channel usage.
CVE-2025-59615Medium· 6.6Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.
CVE-2025-47407High· 7.8Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.
CVE-2025-47389High· 7.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.
CVE-2025-47374Medium· 6.5Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.