PT-2025-28210

Name of the Vulnerable Software and Affected Versions: LuaJIT versions 2.1 and earlier Description: The issue is related to a stack-buffer-overflow in the lj strfmt wfnum function located in lj strfmt num.c. This overflow can potentially lead to exploitation. No information is provided about the...

PT-2025-28104 · Huawei +1 · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a risk of stack overflow when vector images are parsed during file preview. Successful exploitation of this vulnerability may affect the file preview function...

PT-2025-29191 · Tenda · Tenda O3V2

Name of the Vulnerable Software and Affected Versions: Tenda O3V2 version 1.0.0.123880 Description: A critical vulnerability exists in Tenda O3V2. The setAutoReboot function within the /goform/setNetworkService file of the httpd component is affected. Manipulation of the week argument causes a...

CVE-2025-6887

CVE-2025-6887 affects Tenda AC5, specifically the stack-based overflow in /goform/SetSysTimeCfg caused by improper validation of the time/timeZone input. Affects version 15.03.06.47; vulnerability is exploitable remotely and publicly disclosed. Multiple sources (CNVD, Red Hat/CVE summaries, CNVD ...

EulerOS 2.0 SP13 : expat (EulerOS-SA-2025-1686)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an...

CVE-2025-6857

CVE-2025-6857 affects HDF5 1.14.6; the vulnerability is in H5G__node_cmp3 (src/H5Gnode.c) causing a stack-based buffer overflow. Exploitation is local and the exploit has been disclosed publicly. Connected advisories indicate a patched version is available (HDF5 1.14.6-1).

CVE-2025-6857 HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow

A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5Gnodecmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

CVE-2025-6857 HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow

A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5Gnodecmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

CVE-2025-6615 D-Link DIR-619L formAutoDetecWAN_wizard4 stack-based overflow

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.06B01. This affects the function formAutoDetecWANwizard4 of the file /goform/formAutoDetecWANwizard4. The manipulation of the argument curTime leads to stack-based buffer overflow. It is possible to initiate the...

CVE-2025-6614

CVE-2025-6614 affects D-Link DIR-619L (firmware 2.06B01). The issue is a stack-based buffer overflow in function formSetWANType_Wizard5 (/goform/formSetWANType_Wizard5) caused by improper handling of curTime, exploitable remotely. Public exploits have been disclosed; impact can include crashes or...

CVE-2025-6614 D-Link DIR-619L formSetWANType_Wizard5 stack-based overflow

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetWANTypeWizard5 of the file /goform/formSetWANTypeWizard5. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be...

PT-2025-28086 · Belkin · Belkin F9K1122

Name of the Vulnerable Software and Affected Versions: Belkin F9K1122 version 1.00.33 Description: A critical issue has been found that affects the formWlanSetupWPS function of the /goform/formWlanSetupWPS file in the webs component. The manipulation of the wps enrolee pin/webpage argument leads ...

PT-2025-26734 · NetGear · Netgear Wnce3001

Name of the Vulnerable Software and Affected Versions: Netgear WNCE3001 version 1.0.0.50 Description: A critical vulnerability has been found, affecting the http d function of the HTTP POST Request Handler component. The manipulation of the Host argument leads to a stack-based buffer overflow. Th...

D-Link DIR-619L formSetDomainFilter Stack Overflow Vulnerability

The D-Link DIR-619L is a wireless router designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A stack overflow vulnerability exists in the D-Link DIR-619L /goform/formSetDomainFilter, which originates from...

CVE-2025-6374

D-Link DIR-619L (firmware 2.06B01) contains a stack-based buffer overflow in the formSetACLFilter function (/goform/formSetACLFilter) caused by unsafely handling the curTime argument. This remote vulnerability could allow an attacker to exploit the overflow and potentially take control or crash t...

CVE-2025-6371 D-Link DIR-619L formSetEnableWizard stack-based overflow

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.06B01. Affected by this issue is the function formSetEnableWizard of the file /goform/formSetEnableWizard. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be launch...

CVE-2025-6368

CVE-2025-6368 concerns the D-Link DIR-619L router (firmware version 2.06B01). The vulnerability is in the /goform/formSetEmail function where manipulating the curTime/config.smtp_email_subject argument triggers a stack-based buffer overflow. This could allow remote attackers to crash the applicat...

CVE-2025-6367

The CVE-2025-6367 entry concerns D-Link DIR-619L (firmware 2.06B01). A stack-based buffer overflow exists in the /goform/formSetDomainFilter endpoint, triggered by manipulating the curTime/sched_name_%d/url_%d arguments. Exploitation can be performed remotely and may crash the application or allo...

CVE-2025-6328 D-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow

A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-6093

A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295. This vulnerability affects the function heartrate1i2chalwrite of the file 7.Example/hal/i2c/max30100/Manual/demo2/2/heartrate1hal.c. The manipulation of the argument...