CVE-2026-82592

Received Received - Intake

Stack-Based Buffer Overflow in D-Link DIR-825M Firmware

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulDB

Description

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub_46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-30

Last Modified

2026-08-30

Generated

2026-08-31

AI Q&A

2026-08-31

EPSS Evaluated

N/A

NVD

CVE-2026-82592

Affected Vendors & Products

Vendor	Product	Version / Range
d-link	dir-825m	1.1.8

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in the D-Link DIR-825M router version 1.1.8. It occurs in the Disk Formatting Handler Endpoint, specifically in the function sub_46725C when handling the 'partition' argument. A remote attacker can exploit this to cause a buffer overflow, potentially leading to arbitrary code execution or system crashes.

Detection Guidance

This vulnerability affects D-Link DIR-825M devices with firmware version 1.1.8. Detection involves checking for exposed vulnerable endpoints or unusual network traffic. Monitor for requests to /boafrm/formDiskFormat with partition parameter manipulation. Use network scanning tools like Nmap to identify affected devices.

Impact Analysis

If you use a D-Link DIR-825M router with firmware version 1.1.8, an attacker could remotely exploit this vulnerability to gain control of your device. This may allow them to execute malicious code, steal sensitive data, or disrupt network operations. The public availability of the exploit increases the risk of real-world attacks.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection. Organizations using affected D-Link devices may face compliance breaches, legal penalties, and reputational damage if exploited. Immediate patching or mitigation is recommended to maintain compliance.

Mitigation Strategies

Immediately update the D-Link DIR-825M firmware to the latest version to patch the stack-based buffer overflow vulnerability in the Disk Formatting Handler Endpoint. If no update is available, consider isolating the device from the network or disabling remote access to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-82592. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70