This vulnerability involves a buffer overflow in the D-Link DI-8003 device firmware 16.07.26A1, specifically in the /xwgl_ref.asp endpoint. The flaw is due to improper validation of input parameters (name, en, user_id, shibie_name, time, act, log, and rpri) when processing HTTP GET requests. Excessively long strings in these parameters can overflow the buffer, potentially leading to memory corruption. No CVSS score or official remediation guidance is provided, and no exploits have been reported in the wild.

The buffer overflow could allow an attacker to disrupt device operation or potentially execute arbitrary code remotely by sending a specially crafted HTTP GET request. However, the exact impact severity and exploitation details are not specified in the available data. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, it is recommended to restrict access to the affected endpoint and monitor for unusual HTTP requests targeting the /xwgl_ref.asp endpoint. Avoid exposing the device directly to untrusted networks.