CVE-2026-19398: ASUS FA507NU

Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days.

An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local  administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the '  Security Update for ASUS FA507NV / FA507NU BIOS   ' section on the ASUS Security Advisory for more information.

Affected products

  • ASUS FA507NU: version 318 only
  • ASUS FA507NV: version 318 only

Published 2026-08-27. Last modified 2026-09-09.