TOTOLINK LR350 sub_4232EC function stack buffer overflow vulnerability

TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the wifiOff parameter failing to properly...

CVE-2025-63463

CVE-2025-63463 affects Totolink LR350 (v9.3.5u.6369_B20220309). The vulnerability is a stack overflow in the sub_4232EC function triggered by the wifiOff parameter, allowing a crafted request to cause a Denial of Service. Multiple sources corroborate a stack-buffer/stack overflow in this componen...