{"affected":[{"defaultStatus":"unknown","product":"Wi-Fi NPU FW for EN7529, AN7552, AN7581, AN7583","source":"CNA: Airoha","vendor":"Airoha Technology Corp.","versions":[{"lessThanOrEqual":"TLB7.8.0.0_v006","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-89142","cwes":["CWE-787"],"description":"In the Wi-Fi NPU FW, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local denial of service with user execution privileges needed. User interaction is not needed for exploitation.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: Airoha","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},{"score":6.3,"severity":"medium","source":"NVD: 34e3dd7a-f061-4e75-a5eb-9fce7dd970ab","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"}],"modifiedAt":1793942319680,"publishedAt":1793936597817,"references":[{"source":"CNA: Airoha","tags":[],"url":"https://www.airoha.com/product-security-bulletin#CVE-2026-89142"},{"source":"34e3dd7a-f061-4e75-a5eb-9fce7dd970ab","tags":[],"url":"https://www.airoha.com/product-security-bulletin#CVE-2026-89142"}],"remediation":[],"revision":"34d1d34abb3728fa92679361ccaddfb8b44d437453dac1408086b05a56ea5fb0","sources":[{"modifiedAt":1793939320587,"name":"CNA: Airoha","retrievedAt":1793941731765,"url":"https://www.cve.org/CVERecord?id=CVE-2026-89142"},{"modifiedAt":1793942319680,"name":"NVD","retrievedAt":1793946396473,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89142"}],"ssvc":null,"status":"published","title":"Out-of-bounds Write in Wi-Fi NPU","updatedAt":1793946396473}