CVE-2026-19398CWE-787

CVE-2026-19398

published August 27, 2026

CVSS
6.8
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the '

Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
6.8 · CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00112 · 1.3th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-08-27T06:16Z
References (1)
https://www.asus.com/security-advisory · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 28 AUG 06:32Z
    EPSS moved — → 0%
    epss
  • 27 AUG 02:00Z
    “unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system…
    cvelistv5