CVE-2025-50671

CVE-2025-50671 is a buffer overflow vulnerability affecting D-Link DI-8003 firmware version 16.07.26A1 in the /xwgl_ref.asp endpoint. The flaw arises from improper parameter validation, allowing attackers to trigger memory corruption by submitting excessively long strings in multiple input fields including name, en, user_id, shibie_name, time, act, log, and rpri parameters. The vulnerability presents a HIGH severity risk with a CVSS 3.1 score of 7.5. It is remotely exploitable over the network without requiring authentication or user interaction, making the attack surface particularly broad. While the primary impact is denial of service through system crashes, the buffer overflow nature of the defect carries theoretical risk for code execution depending on memory protections in place. There is currently no evidence of active exploitation in the wild, as the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and maintains an inactive status on threat tracking platforms. The extremely low EPSS probability score of 0.00174 indicates minimal community attention and limited exploit availability, suggesting this remains a lower-priority threat for immediate remediation compared to actively exploited vulnerabilities.