CVE-2025-15608

Description

This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution through complex heap-spray techniques. Successful exploitation may result in repeated service unavailability and, in certain scenarios, allow an attacker to gain control of the device.

PUBLISHED Reserved 2026-03-10 | Published 2026-03-20 | Updated 2026-03-23 | Assigner TPLink

Problem types

CWE-121 Stack-based buffer overflow

Product status

Credits

samuzora finder

References

www.tp-link.com/en/support/download/archer-ax53/v1/ patch

www.tp-link.com/us/support/faq/5025/ vendor-advisory

cve.org (CVE-2025-15608)

nvd.nist.gov (CVE-2025-15608)

Download JSON