| Title | Edimax BR-6428nC v1.16 Buffer Overflow |
|---|
| Description | A stack-based buffer overflow vulnerability exists in the IQ setup `setWAN` handler of Edimax BR-6428nC v1.16. In the PPTP configuration path, the attacker-controlled `pptpDfGateway` parameter is copied into a fixed-size stack buffer with `strcpy()` and without any length validation.
An attacker can send an oversized request value to crash the web process and may be able to achieve arbitrary code execution depending on memory layout and platform protections. |
|---|
| Source | ⚠️ https://tzh00203.notion.site/Edimax-BR-6428nC-v1-16-setWAN-pptpDfGateway-Stack-Overflow-33db5c52018a80c1835dd4fab4b6c7f2 |
|---|
| User | tian (UID 93438) |
|---|
| Submission | 04/10/2026 04:54 (3 months ago) |
|---|
| Moderation | 05/02/2026 13:05 (22 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 360843 [Edimax BR-6428nC up to 1.16 /goform/setWAN pptpDfGateway buffer overflow] |
|---|
| Points | 17 |
|---|