D-Link DI-8100 Stack-Based Buffer Overflow Vulnerability in jhttpd Component

A critical stack-based buffer overflow vulnerability has been identified in the D-Link DI-8100 router, affecting versions prior to May 23, 2025. The issue arises in the jhttpd component, specifically within the httpd_get_parm function of the login.cgi file. Exploitation of this vulnerability requires manipulation of the notify argument and can only be initiated from within the local network.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.