Buffer Overflow Vulnerability in D-Link DI-8003 by D-Link
CVE-2025-50645

7.5HIGH

Key Information:

Vendor

D-Link
Status
DI-8003
Vendor
CVE Published:
8 April 2026

What is CVE-2025-50645?

A buffer overflow vulnerability exists in the D-Link DI-8003 model running firmware version 16.07.26A1, caused by improper handling of the 's' parameter in the pppoe_list_opt.asp endpoint. An attacker can exploit this flaw by sending a specially crafted request containing a large value for the 's' parameter, potentially leading to unauthorized access or disruption of service.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/xiaotea/iot-vulnerability-collection/b...
https://supportannouncement.us.dlink.com/security/publica...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.