Threats tagged 'ghsa-xhj4-39f6-qqcq'

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware version DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module. The flaw arises from improper handling of the /proc/version content, which is read into a fixed-size buffer and concatenated unsafely, leading to overflow when input exceeds 481 bytes. This may allow an attacker with control over /proc/version to execute arbitrary code on the device.