CVE-2025-62526

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122

Affected software

Vendor	Product	Versions
openwrt	openwrt	< 24.10.4

References

Timeline

Published: Oct 22, 2025
Last modified: Oct 19, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-625277.1Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for CVE-2025-625285.4Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for CVE-2025-62537.5The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, CVE-2025-62549.8The Doctreat Core plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.6.8. This is due to the CVE-2025-625498.8Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a net CVE-2025-62556.4The Dynamic AJAX Product Filters for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ param CVE-2025-625508.8Out-of-bounds write in Azure Monitor Agent allows an authorized attacker to execute code over a network.CVE-2025-625527.8Relative path traversal in Microsoft Office Access allows an unauthorized attacker to execute code locally.CVE-2025-625537.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2025-625547.8Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.CVE-2025-625557.0Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.CVE-2025-625567.8Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.