CVE-2025-6334
BaseFortify
Publication date: 2025-06-20
Last updated on: 2025-07-11
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| dlink | dir-867_firmware | 1.0 |
| dlink | dir-867 | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-6334 is a critical stack-based buffer overflow vulnerability in the D-Link DIR-867 router version 1.0. It arises from improper handling of string operations in the Query String Handler component, specifically due to unsafe use of the strncpy function without proper bounds checking. This can lead to overwriting stack memory, causing crashes or enabling arbitrary code execution. The vulnerability can be exploited remotely without authentication. [1, 2]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing a remote attacker to execute arbitrary code on the affected device, potentially leading to a complete compromise of the router. It affects the confidentiality, integrity, and availability of the device, meaning sensitive data could be exposed, altered, or the device could be rendered unusable. Since the exploit is publicly available and easy to use, the risk is significant. [2]
What immediate steps should I take to mitigate this vulnerability?
No known mitigations or countermeasures currently exist for this vulnerability. It is recommended to replace the affected D-Link DIR-867 version 1.0 router with an alternative product to mitigate the risk. [2]