CVE-2026-82593: Stack-based Buffer Overflow in D-Link DIR-825M

This vulnerability is a stack-based buffer overflow in the D-Link DIR-825M router firmware version 1.1.8. It occurs in the LTE Module Firmware Upgrade component's function sub_41802C, triggered by manipulation of the fota_url argument. The flaw allows remote attackers to cause a buffer overflow, which may lead to arbitrary code execution or denial of service. The vulnerability has a CVSS 4.0 score of 9.4, indicating critical severity. Exploit code is publicly available, but no official fix or patch has been disclosed by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary code or cause a denial of service on affected devices. Given the critical CVSS score and the nature of a stack-based buffer overflow, the impact is severe, potentially compromising device integrity and network security.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch has been published by D-Link at this time. Until a patch is available, users should consider limiting exposure of the affected device to untrusted networks and monitor for updates from the vendor.