CVE-2025-50645 is a buffer overflow vulnerability (CWE-120) in the D-Link DI-8003 device firmware 16.07.26A1. The vulnerability is triggered by sending a crafted request to the pppoe_list_opt.asp endpoint with an overly large 's' parameter value, causing a buffer overflow. The vulnerability is remotely exploitable without privileges or user interaction, impacting availability (denial of service). The CVSS v3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). No patch or official remediation information is currently provided by the vendor.

Successful exploitation can cause a buffer overflow condition leading to denial of service (availability impact) on the affected device. There is no indication of confidentiality or integrity impact. The vulnerability can be exploited remotely without authentication or user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network defenders should consider restricting access to the vulnerable endpoint and monitor for unusual traffic patterns targeting the pppoe_list_opt.asp endpoint. Avoid exposing the device directly to untrusted networks.