Buffer Overflow Vulnerability in D-Link DIR-816A2 Router Firmware

CVE-2025-60679

What is CVE-2025-60679?

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router's firmware, specifically within the upload.cgi module. This issue arises when the /proc/version file is read into a fixed 512-byte buffer, which is then improperly handled with the sprintf() function, concatenating it into another buffer of the same size. If an attacker can manipulate the contents of /proc/version to exceed the 481-byte threshold, this results in a stack buffer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the router, posing a significant threat to network security.

References