← Database

CVE-2025-15190

HIGH CVSS: 8.8 Published: 2025-12-29 Modified: 2026-06-17

Description

A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The manipulation of the argument ip6addr results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be exploited.

Affected Platforms

Dlink Dwr-M920 FirmwareDlink Dwr-M920

Weakness Type

CWE-119, CWE-121

References