CVE-2026-19398

Vulnerability Description

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU BIOS ' section on the ASUS Security Advisory for more information.

Related Weaknesses (CWE)

CWE-787

References

https://www.asus.com/security-advisory

FAQ

What is CVE-2026-19398?

CVE-2026-19398 is a documented vulnerability. An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) r...

How severe is CVE-2026-19398?

CVSS scoring is not yet available for CVE-2026-19398. Check NVD for updates.

Is there a patch for CVE-2026-19398?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.