This vulnerability (CWE-787) involves an out-of-bounds write in certain versions of Ubiquiti Dream Machines UniFi gateway devices. Exploitation requires network access and can result in a denial of service by crashing or destabilizing the device. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. The affected versions include all releases prior to 4.0.21, 5.1.26, and 5.1.31 in the respective version branches. No known exploits in the wild have been reported. No vendor patch links are provided in the data, and the product is not a cloud service.

Successful exploitation leads to denial of service on the affected UniFi gateway devices, impacting network availability. There is no impact on confidentiality or integrity. The attack can be performed remotely over the network without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch links are provided, users should monitor Ubiquiti's advisories for updates. Until a fix is available, restricting network access to the affected devices and minimizing exposure may reduce risk.