Skip to content
OpenAdvisories
High · 8.2 CVE-2026-17518 EUVD-2026-104783GHSA-8j23-4jj7-m65q

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations…

Published Oct 20, 2026 · Updated Oct 20, 2026 · Assigned by ASUS

Description

Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTTP request with input exceeding the expected length.
Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS Router ASUSWRT 3.0.0.4_386 series, ASUSWRT 3.0.0.4_388 series —

References