openwrt odhcpd vulnerabilities

Newest CVEs

• CVE-2026-55606

  odhcpd: Stack buffer overread via DUID length endianness mismatch in memcmp()

  openwrt · odhcpd

  Medium6.5
• CVE-2026-53918

  odhcpd DHCPv6 IA dangling first pointer use-after-free

  openwrt · odhcpd

  High8.8
• CVE-2026-53920

  odhcpd DHCPv6 Short IA_NA/IA_PD Body Stack Disclosure

  openwrt · odhcpd

  High8.7
• CVE-2026-53921

  odhcpd: Stack buffer overflow in DHCPv6 IA reply serialization (2 independent sites)

  openwrt · odhcpd

  Critical9.8
• CVE-2026-53922

  odhcpd: pre-auth remote DoS via size_t underflow in dhcpv6_ia_handle_IAs (stack BOF, canary-terminated)

  openwrt · odhcpd

  Medium6.5