CVE-2026-19398

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the '  Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.

  • Published Aug 27, 2026
  • CVSS 6.8 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-19398 at the National Vulnerability Database