CVE-2026-53920

The odhcpd DHCPv6, DHCPv4, and router-advertisement server (used by OpenWrt ) is vulnerable to a stack disclosure in versions 17.01.0 through before 25.12.3 . The vulnerability exists because the DHCPv6 IA parser accepts IA_NA or IA_PD options with bodies shorter than the expected struct dhcpv6_i...