CVE-2025-50644
Published: 08 April 2026
Summary
CVE-2025-50644 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Dlink Di-8003 Firmware. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 16.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Directly enforces validation of user-supplied input at endpoints like qj.asp to prevent buffer overflows from malformed data.
Requires timely remediation of flaws such as this buffer overflow via vendor firmware patches referenced in D-Link advisories.
Limits the effects of denial-of-service conditions triggered by unauthenticated remote buffer overflow exploitation.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Buffer overflow in public qj.asp web endpoint enables remote unauthenticated exploitation for DoS via application/system crash.
NVD Description
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.
Deeper analysisAI
CVE-2025-50644 is a buffer overflow vulnerability (CWE-120) in the D-Link DI-8003 device running firmware version 16.07.26A1. The flaw arises from improper validation of user input processed by the qj.asp endpoint, resulting in a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
An unauthenticated remote attacker with network access to the device can exploit this vulnerability through low-complexity attacks requiring no user interaction. Exploitation triggers a buffer overflow that causes a denial-of-service condition, severely impacting device availability while leaving confidentiality and integrity unaffected.
D-Link has issued security advisories for this issue, including publication SAP10505 at https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10505 and general security bulletins at https://www.dlink.com/en/security-bulletin/. The vulnerability is also documented in an IoT vulnerability collection at https://github.com/xiaotea/iot-vulnerability-collection/blob/main/README.md. Practitioners should review these resources for recommended patches and mitigation steps.
Details
- CWE(s)