---
id: "CVE-2026-84729"
kind: "vulnerability"
aliases: ["CVE-2026-84729"]
title: "ASUS router firmware: out-of-bounds write from crafted nearby packets"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["asus", "home-network", "infrastructure", "routers"]
not_affected_if: ["no-nearby-untrusted-access", "unaffected-firmware"]
published_at: "2026-11-04T02:17:21+00:00"
first_seen_at: "2026-11-04T02:46:02+00:00"
updated_at: "2026-11-04T02:48:29+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84729", "first_seen_at": "2026-11-04T02:46:02+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-04T02:48:29+00:00"}]
---

# ASUS router firmware: out-of-bounds write from crafted nearby packets

Certain ASUS router firmware versions contain an out-of-bounds write triggered by a crafted packet. An unauthenticated attacker on a nearby network could write data beyond an intended buffer, or crash the device with a denial-of-service.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Find your router model and firmware version in the ASUS admin page or the ASUS Router app
- Open the 'Security Update for ASUS Router Firmware' section of the ASUS Security Advisory and compare. Affected models and fixed builds are not yet confirmed from a vendor page.
- If a newer firmware is listed for your model on asus.com/support, install it.

## Timeline

- 2026-11-04T02:46:02+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-84729
- 2026-11-04T02:48:29+00:00 analyst — Could not read the ASUS advisory: asus.com advisory pages only redirect, and no page names this CVE with models or fixed builds. Only the NVD text is linked. Sibling ASUS bulletins from Oct 2026 concern the 3.0.0.6_102, 3.0.0.4_386 and 3.0.0.4_388 series, but nothing ties this CVE to them, so no versions are written. Nothing is marked verified. To settle it, read the 'Security Update for ASUS Router Firmware' entry on asus.com/content/security-advisory in a browser.

## Documents

- [describes] NVD CVE-2026-84729 https://nvd.nist.gov/vuln/detail/CVE-2026-84729

## From the sources

Out-of-bounds write in certain ASUS Router firmware allow an unauthenticated nearby attacker to write data beyond the intended buffer or potentially cause a denial-of-service (DoS) via a crafted packet.
Refer to the ' 
Security Update for ASUS Router Firmware  ' section on the ASUS Security Advisory for more information.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_