Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall.so where the comment parameter is not properly validated for length.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2025-67187 A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_mod… https://www.cve.org/CVERecord?id=CVE-2025-67187
Post summary
A stack‑based buffer overflow vulnerability was disclosed in TOTOLINK A950RG firmware; no PoC, exploit code, or patch details were provided.
🔴 CVE-2025-67187 - Critical A stack-based buffer overflow vulnerability was identified in TOTOLINK A950RG V4.1.2cu.5204_B20210112. The flaw exists in the setIpQosRules interface of /lib/cste_modules/firewall.so wher... https://www.thehackerwire.com/vulnerability/CVE-2025-67187/ https://t.co/1yHSPg4O8k
Post summary
The tweet announces CVE-2025-67187, a critical stack-based buffer overflow in TOTOLINK A950RG firmware, providing technical details but no exploit, PoC, or patch information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | totolink | a950rg | - | - | - |
| OS | totolink | a950rg_firmware | 4.1.2cu.5204_b20210112 | - | - |