CVE-2025-62526— OpenWrt ubusd vulnerable to heap buffer overflow
Quick assessment
Affected
openwrt openwrt
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenWrt是OpenWrt开源的一套针对嵌入式设备的Linux操作系统。 OpenWrt 24.10.4之前版本存在安全漏洞，该漏洞源于事件注册解析代码存在堆缓冲区溢出，可能导致执行任意代码和绕过监听ACL。
Possible ATT&CK Techniques 2 AI
T1190 · Exploit Public-Facing Application T1203 · Exploitation for Client Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-62526
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenWrt ubusd vulnerable to heap buffer overflow
Source: CVE Program / CVE List V5
Vulnerability Description
OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
OpenWrt 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenWrt是OpenWrt开源的一套针对嵌入式设备的Linux操作系统。 OpenWrt 24.10.4之前版本存在安全漏洞，该漏洞源于事件注册解析代码存在堆缓冲区溢出，可能导致执行任意代码和绕过监听ACL。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-62526
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-62526
请登录查看更多情报信息。
Patches & Fixes for CVE-2025-62526 (1)
Vendor Advisories for CVE-2025-62526 (2)
-
-
🔗 ubusd: heap buffer overflow · Advisory · openwrt/openwrt · GitHub Read full article x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: openwrt
-
CVE-2026-62947
OpenWrt: ACL bypass and arbitrary root file read via cgi-io -
CVE-2026-62948
OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can injec -
CVE-2026-55490
OpenWrt: EAD Integer Underflow → Pre-Auth Denial of Service -
CVE-2026-30874
OpenWrt procd PATH Environment Variable Filter Bypass via In -
CVE-2026-30873
OpenWrt Project jsonpath: Memory leak when processing string
Same vendor: openwrt
-
CVE-2026-55897
luci-app-advanced-reboot read ACL exposes /bin/sh through fi -
CVE-2026-55159
luci-app-adblock-fast: Delegated `luci-app-adblock-fast` use -
CVE-2026-62381
luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overf -
CVE-2026-72842
OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass -
CVE-2026-72841
luci-app-openvpn Path Traversal RCE via instance_name2
Same weakness: CWE-122
-
CVE-2026-103631
Chrome <154.0.8037.97 WebRTC堆溢出漏洞 -
CVE-2026-91135
Apache Thrift: C++ `THeaderTransport::transform()` heap buff -
CVE-2026-14316
Heap buffer overflow in boks_sshd revoked-key error handling -
CVE-2026-101283
iperf3 3.20-3.21 RSA解密堆溢出漏洞 -
CVE-2026-103242
Rpm: heap-based buffer overflow write in hex2binv() via a mi
V. Comments for CVE-2025-62526
No comments yet