This vulnerability affects the D-Link DIR-825 router, specifically version 3.00b32. The issue resides in the tunnel_set_params function of the tunnel.c file in the rp-l2tp component. An attacker can remotely manipulate the peer_hostname argument, causing an out-of-bounds write. This type of memory corruption can lead to potential arbitrary code execution or system instability. The CVSS 4.0 base score is 9.3, indicating a critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impacts on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. Given the critical CVSS score and the nature of the out-of-bounds write, the impact includes full compromise of the device's confidentiality, integrity, and availability.

No patch or official remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, affected users should consider network-level protections such as restricting access to the device from untrusted networks.