This vulnerability involves a buffer overflow (CWE-121) in the D-Link DI-8003 router firmware 16.07.26A1, specifically in the /xwgl_ref.asp endpoint. The flaw is triggered when an attacker sends an HTTP GET request with overly long strings in parameters such as name, en, user_id, shibie_name, time, act, log, and rpri. The improper parameter handling can cause memory corruption leading to denial of service. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). There is no vendor advisory or patch information available at this time.

Successful exploitation results in denial of service by crashing or destabilizing the affected D-Link DI-8003 device. There is no indication of confidentiality or integrity impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected endpoint and monitoring for unusual HTTP GET requests with abnormally long parameters targeting /xwgl_ref.asp. Avoid exposing the device to untrusted networks where possible.