← Vulnerability feed

Vulnerability record · CVE-2023-35965 · published 11 October 2023

CVE-2023-35965: Yifanwireless yf325 firmware integer overflow vulnerability

Yifanwireless · Yf325 Firmware

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the malloc function.

9.8 CVSS 3.1 Critical EPSS 0.77% · top 46.1% CWE-190 · Integer overflowCWE-787 · Out-of-bounds write
9.8CVSS 3.1 base score
0.77%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

Two heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to a heap buffer overflow. An attacker can send a network request to trigger these vulnerabilities.This integer overflow result is used as argument for the malloc function.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1787 Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1787 Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1787

Track CVE-2023-35965 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-35967Yifanwireless yf325 firmware integer overflow vulnerabilityTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially cr…EPSS 0.77%9.8CVE-2023-35968Yifanwireless yf325 firmware integer overflow vulnerabilityTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data functionality of Yifan YF325 v1.0_20221108. A specially cr…EPSS 0.77%9.8CVE-2023-32645Yifan YF325 httpd debug credentials authentication bypassThe Yifan YF325 firmware (v1.0_20221108) ships leftover debug credentials in the httpd component. A specially crafted network request can exploit thi…EPSS 54%analysed9.8CVE-2023-34346Yifanwireless yf325 firmware out-of-bounds write vulnerabilityA stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0_20221108. A specially crafted network…EPSS 1.3%9.8CVE-2023-34365Yifanwireless yf325 firmware stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality of Yifan YF325 v1.0_20221108. A specially crafted n…EPSS 0.77%9.8CVE-2023-34426Yifanwireless yf325 firmware stack-based buffer overflow vulnerabilityA stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of Yifan YF325 v1.0_20221108. A specially crafted networ…EPSS 0.77%9.8CVE-2023-35055Yifanwireless yf325 firmware stack-based buffer overflow vulnerabilityA buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lea…EPSS 1.0%9.8CVE-2023-35056Yifanwireless yf325 firmware stack-based buffer overflow vulnerabilityA buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lea…EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2023-35965), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.