CVE-2025-25740

CWE-121 — Stack-based Buffer OverflowCWE-401 — Memory Leak4 documents4 sources
Severity
5.5MEDIUM
EPSS
0.3%
top 46.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dlink Dir-853 Firmware
Timeline
PublishedFeb 14

Description

D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the PSK parameter in the SetQuickVPNSettings module.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LExploitability: 2.1 | Impact: 3.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-9rhh-9h7r-f9gf: D-Link DIR-853 A1 FW1↗2025-02-14
▶
CVEList
CVE-2025-25740: D-Link DIR-853 A1 FW1↗2025-02-14
▶

📋Vendor Advisories

1
Microsoft
A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBI_IOCATT, because kobj->name is not released.↗2024-02-13
▶
CVE-2025-25740 (MEDIUM CVSS 5.5) | D-Link DIR-853 A1 FW1.20B07 was dis | cvebase.io