CVE-2025-62526
OpenWrt ubusd vulnerable to heap buffer overflow
- State
- Published
- Severity
- 7.9 High
- Published
- Oct 22, 2025
- Updated
- Oct 22, 2025
- Reserved
- Oct 15, 2025
Description
OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.9 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H | GitHub_M |
Weaknesses
- CWE-122 Heap-based Buffer Overflow
Affected Products
| Product | Versions |
|---|---|
openwrtopenwrt |
|
References
- https://github.com/openwrt/openwrt/security/advisories/GHSA-cp32-65v4-cp73
- https://github.com/openwrt/openwrt/commit/4b907e69ea58fc0ba35fd1755dc4ba22262af3a4
- https://github.com/openwrt/openwrt/commit/a7901969932a175cded3c93bdeb65f32ed3705e6
- https://github.com/openwrt/ubus/commit/60e04048a0e2f3e33651c19e62861b41be4c290f
- https://github.com/openwrt/ubus/commit/aa4a7ee1d3417bc11207ad0a78d579ece7fe0c13
- https://github.com/openwrt/ubus/commit/d31effb4277bd557f5ccf16d909422718c1e49d0
- https://openwrt.org/advisory/2025-10-22-1
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.