{"id":76121,"date":"2025-09-24T19:09:14","date_gmt":"2025-09-24T19:09:14","guid":{"rendered":""},"modified":"2025-10-21T06:15:09","modified_gmt":"2025-10-21T12:15:09","slug":"cve-2025-10666-remote-buffer-overflow-vulnerability-in-d-link-dir-825-routers","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-10666-remote-buffer-overflow-vulnerability-in-d-link-dir-825-routers\/","title":{"rendered":"CVE-2025-10666: Remote Buffer Overflow Vulnerability in D-Link DIR-825 Routers<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

A severe vulnerability, CVE-2025-10666, that affects the D-Link DIR-825 routers up to version 2.10, has emerged in the cybersecurity landscape. This flaw, found in the function sub_4106d4 of the file apply.cgi, allows for a buffer overflow attack when the argument countdown_time is manipulated. As this exploit can be executed remotely<\/a>, it poses a serious threat to users of the affected routers, potentially leading to system compromise or data leakage. The fact that the exploit has been made public and affects products that are no longer supported by the maintainer adds to the gravity of the situation.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-10666
\nSeverity: High (8.8 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n