Buffer Overflow Vulnerability in D-Link DI-8003 Router
CVE-2025-50646

7.5HIGH

Key Information:

Vendor

D-Link
Status
DI-8003
Vendor
CVE Published:
8 April 2026

What is CVE-2025-50646?

A buffer overflow issue has been identified in the D-Link DI-8003 router, specifically in version 16.07.26A1. This vulnerability arises from improper input validation on the 'name' parameter within the /qos_type_asp.asp endpoint. An attacker can exploit this flaw to execute arbitrary code or manipulate the router’s functionality, potentially compromising the device’s security.

References

https://www.dlink.com/en/security-bulletin/
https://github.com/xiaotea/iot-vulnerability-collection/b...
https://supportannouncement.us.dlink.com/security/publica...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.