CVE-2025-6370 – D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

June 20, 2025

CVE ID : CVE-2025-6370

Published : June 20, 2025, 10:15 p.m. | 29 minutes ago

Description : A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the function formWlanGuestSetup of the file /goform/formWlanGuestSetup. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6368 – D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

Next Article CVE-2025-6369 – D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

Highlights

CVE-2025-37813 – Etron USB XHCI Invalid Pointer Dereference Vulnerability

May 8, 2025

CVE ID : CVE-2025-37813

Published : May 8, 2025, 7:15 a.m. | 58 minutes ago

Description : In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Fix invalid pointer dereference in Etron workaround

This check is performed before prepare_transfer() and prepare_ring(), so
enqueue can already point at the final link TRB of a segment. And indeed
it will, some 0.4% of times this code is called.

Then enqueue + 1 is an invalid pointer. It will crash the kernel right
away or load some junk which may look like a link TRB and cause the real
link TRB to be replaced with a NOOP. This wouldn’t end well.

Use a functionally equivalent test which doesn’t dereference the pointer
and always gives correct result.

Something has crashed my machine twice in recent days while playing with
an Etron HC, and a control transfer stress test ran for confirmation has
just crashed it again. The same test passes with this patch applied.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Error’d: You Talkin’ to Me?

The Psychology Of Trust In AI: A Guide To Measuring And Designing For User Confidence

This week in AI updates: OpenAI Codex updates, Claude integration in Xcode 26, and more (September 19, 2025)

Report: The major factors driving employee disengagement in 2025

Development Release: Zorin OS 18 Beta

Distribution Release: IPFire 2.29 Core 197

Development Release: Ubuntu 25.10 Beta

Development Release: Linux Mint 7 Beta “LMDE”

Student Performance Prediction System using Python Machine Learning (ML)

Student Performance Prediction System using Python Machine Learning (ML)

The attack on the npm ecosystem continues

Feature Highlight

Hyprland Made Easy: Preconfigured Beautiful Distros

Hyprland Made Easy: Preconfigured Beautiful Distros

Development Release: Zorin OS 18 Beta

Distribution Release: IPFire 2.29 Core 197

CVE-2025-6370 – D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

CVE-2025-3968 – Codeprojects News Publishing Site Dashboard SQL Injection Vulnerability

I don’t care about Genshin Impact, but this is the best power bank I’ve ever used — and there’s still time to save on one before Prime Day ends

This proxy provider I tested is the best for web scraping – and it’s not IPRoyal or MarsProxies

CVE-2025-5632 – Content-Management-System News-Buzz SQL Injection Vulnerability

CVE-2025-37813 – Etron USB XHCI Invalid Pointer Dereference Vulnerability

CVE-2024-53016 – Canon Camera Off-Path Memory Corruption Vulnerability

iRasptek Raspberry Pi 5 8GB Starter Kit Review

Windows 11 Powers Up WSL: How GPU Acceleration & Kernel Upgrades Change the Game

CVE-2025-6370 – D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

Related Posts