The vulnerability of the sub_42261C() function in D-Link’s router microprogramming systems DWR-M920 and DIR-822K allows a hacker to execute arbitrary code.

The vulnerability of the sub42261C function in D-Link’s router microprogramming systems, DWR-M920 and DIR-822K, is related to the execution of an operation outside the buffer in memory when processing the argumenip6addr. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

CVE-2025-15190: Stack-based Buffer Overflow

A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public...