CVE-2026-55606

The odhcpd server, used by OpenWrt in versions 25.12 and prior , is vulnerable to a stack buffer overread due to a DUID length endianness mismatch in dhcpv6.c:720. On little-endian hosts , the software uses a network-byte-order DUID length value directly as a memcmp() size parameter, allowing a s...