{"id":34363,"date":"2025-05-04T01:57:42","date_gmt":"2025-05-04T01:57:42","guid":{"rendered":""},"modified":"2025-05-30T13:06:33","modified_gmt":"2025-05-30T19:06:33","slug":"cve-2025-2851-critical-buffer-overflow-vulnerability-in-various-gl-inet-products","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-2851-critical-buffer-overflow-vulnerability-in-various-gl-inet-products\/","title":{"rendered":"CVE-2025-2851: Critical Buffer Overflow Vulnerability in Various GL.iNet Products<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A critical vulnerability, designated as CVE-2025-2851, has been discovered in a wide range of GL.iNet products. This vulnerability is particularly significant due to its high severity (CVSS score: 8.0) and the potential for system compromise or data leakage. The vulnerability resides in an unknown function of the file<\/a> plugins.so of the RPC Handler component, resulting in a buffer overflow condition. Given the potential for serious harm, it is essential for organizations using any of the affected GL.iNet products to understand the nature of this vulnerability and take the necessary steps to mitigate the risk<\/a>.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-2851
\nSeverity: Critical (CVSS score: 8.0)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n