CVE-2025-58077

HIGH7.3

Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53

Published Feb 3, 2026

Modified 2 days ago

Details

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code

via a specially crafted set of network packets containing an excessive number of host entries

This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

References

WEBhttps://talosintelligence.com/vulnerability_reports/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-58077 FIXhttps://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware FIXhttps://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware ADVISORYhttps://www.tp-link.com/us/support/faq/4943/

CVSS Analysis

CVSS v4.0

7.3

Exploitability

Attack Vector

AdjacentAV:A

Attack Complexity

HighAC:H

Attack Requirements

NoneAT:N

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Vulnerable System

Vuln. Confidentiality

HighVC:H

Vuln. Integrity

HighVI:H

Vuln. Availability

HighVA:H

Subsequent System

Subseq. Confidentiality

NoneSC:N

Subseq. Integrity

NoneSI:N

Subseq. Availability

NoneSA:N

7.3/CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weakness Type (CWE)

Other

CWE-122

Ecosystems

Timeline

PublishedFeb 3, 2026

ModifiedFeb 4, 2026