An out‑of‑bounds write flaw in the firmware of certain Ubiquiti UniFi gateway devices allows a network‑connected attacker to corrupt memory and trigger a device crash, resulting in a denial of service that disables the gateway and cuts connectivity to downstream clients.

Affected devices include Ubiquiti Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, Express, Express 7, and UniFi Gateways. The vulnerability exists in firmware versions that handle network traffic processing and is present in the code path that processes certain network packets.

The CVSS score of 7.5 indicates high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires network access to the vulnerable device; the CVE description does not specify authentication requirements, so the attacker needs to be able to send crafted data over the network. While no public exploits are known, the nature of the flaw suggests that an attacker could develop an exploit to cause a DoS.