CVE-2025-6121CWE-119CWE-121

D-Link DIR-632 HTTP POST Request get_pure_content stack-based overflow

Critical · published June 16, 2025

CVSS v4.0
9.3
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

🚨 A remote attacker can trigger a stack-based buffer overflow just by manipulating the Content-Length in the D-Link DIR-632 router! 🔥 Think of this like a postal worker who misreads the weight on a package label and forces way too much inside the delivery truck—eventually, it all comes crashing down! 📦 If exploited, this vulnerability could allow an attacker to execute arbitrary code on the router, potentially gaining full control over it. With remote access, they can intercept your internet traffic, compromise sensitive data, or even hijack connected devices—absolutely devastating!

Put simply

Think of this like a postal worker who misreads the weight on a package label and forces way too much inside the delivery truck—eventually, it all comes crashing down! 📦 This issue arises from improper handling of the Content-Length argument in the HTTP POST request handler, which leads to a stack-based buffer overflow. An attacker can exploit this by sending specially crafted requests, triggering unpredictable results in the system.

What to do

If exploited, this vulnerability could allow an attacker to execute arbitrary code on the router, potentially gaining full control over it. With remote access, they can intercept your internet traffic, compromise sensitive data, or even hijack connected devices—absolutely devastating! To secure your D-Link DIR-632, immediately discontinue use, as it's no longer supported and won’t receive security updates. Consider upgrading to a newer router model that is actively maintained and patched. Always keep your hardware up-to-date to avoid such vulnerabilities! You've got this! With awareness and action, you're on your way to a safer network! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.02779 · 86.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-06-16T12:00Z
EPSS history
Timeline
  • 16 JUN 12:00Z
    D-Link DIR-632 HTTP POST Request get_pure_content stack-based overflow
    cvelistv5