CVE-2025-61944

HIGH7.3

Heap-based Buffer Overflow Vulnerability in TP-Link Archer AX53

Published Feb 3, 2026

Modified 2 weeks ago

Details

Heap-based Buffer Overflow vulnerability in TP-Link Archer AX53 v1.0 (tmpserver modules) allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code via a specially crafted network packet containing an excessive number of fields with zero‑length values.This issue affects Archer AX53 v1.0: through 1.3.1 Build 20241120.

References

WEB

https://talosintelligence.com/vulnerability_reports/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-61944

FIX

https://www.tp-link.com/en/support/download/archer-ax53/v1/#Firmware

FIX

https://www.tp-link.com/my/support/download/archer-ax53/v1/#Firmware

ADVISORY

https://www.tp-link.com/us/support/faq/4943/

CVSS Analysis