A memory safety error known as an out‑of‑bounds write allows an attacker who can access the device network to trigger a service crash on certain UniFi gateway devices. The flaw is a classic buffer overrun (CWE‑787) that can be used to desynchronize memory and cause the target process to terminate, resulting in a denial of service. The impact is loss of service availability and potential interruption of network traffic, but it does not directly expose confidential data or allow remote code execution.

The vulnerability affects several Ubiquiti product lines, including Cloud Gateways, Dream Machines, Dream Routers, Dream Wall, Enterprise Firewalls, Express, Express 7, and UniFi Gateways. No specific firmware or release versions are listed in the advisory, so any device running an affected family at the time of the advisory could be vulnerable.

The CVSS score of 7.5 indicates the flaw presents a moderate to high severity risk. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited publicly known exploitation. The attack vector is inferred to be an internal or network attacker with access to the gateway’s network interface; external attackers would need to gain network connectivity first. The exploit would require sending malformed traffic that triggers the memory write, which can likely be achieved without authentication but with network reach.