A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall.so where the comment parameter is not properly validated for length.
History

Tue, 03 Feb 2026 18:15:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall.so where the comment parameter is not properly validated for length.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-02-03T17:40:20.302Z

Reserved: 2025-12-08T00:00:00.000Z

Link: CVE-2025-67187

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-02-03T18:16:16.153

Modified: 2026-02-03T18:16:16.153

Link: CVE-2025-67187

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.