CVE-2026-82592: Stack-based Buffer Overflow in D-Link DIR-825M

This vulnerability affects D-Link DIR-825M version 1.1.8 and involves a stack-based buffer overflow triggered by improper handling of the partition argument in the Disk Formatting Handler Endpoint's function sub_46725C. The flaw allows remote attackers to execute code or cause denial of service by sending crafted requests to the /boafrm/formDiskFormat endpoint. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity with high impact on confidentiality, integrity, and availability. Although exploit code is publicly available, there is no vendor-provided patch or official remediation at this time.

Successful exploitation of this vulnerability can lead to remote code execution or denial of service on the affected device, compromising its confidentiality, integrity, and availability. The critical CVSS score reflects the high potential impact. Since the exploit is public, the risk of attacks is elevated, especially on unpatched devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, affected users should consider disabling the vulnerable service or restricting access to the /boafrm/formDiskFormat endpoint to trusted networks only to reduce exposure.