CVE-2025-57637: dlink di-7100g\+_firmware Heap-based Buffer Overflow

Vulnerability summary

CVE-2025-57637 is a high (CVSS 7.5) Heap-based Buffer Overflow vulnerability in dlink di-7100g\+_firmware. EPSS estimates a 0.65% chance of exploitation in the next 30 days, higher than 50.3% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 23-09-2025
   PublishedVulnerability first disclosed.
2. 24-09-2025
   Last modifiedVulnerability information updated.

Description

Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing attackers to cause a denial of service or execute arbitrary code.

• CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().