Skip to content
OpenAdvisories

Product · openwrt

odhcpd

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-53918

    odhcpd DHCPv6 IA dangling first pointer use-after-free

    odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message `first` lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A …

    openwrt odhcpd
  • High 8.7
    CVE-2026-53920

    odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure

    odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IA_NA or IA_PD option whose body is shorter than struct dhcpv6_ia_hdr, casts the option header …

    openwrt odhcpd