CVE-2026-9425 PUBLISHED

A security vulnerability has been detected in Edimax EW-7438RPn 1.31. The impacted element is the function formWlanMP of the file /goform/formWlanMP. The manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e2pTxPower3/e2pTxPower4/e2pTxPower5/e2pTxPower6/e2pTxPower7/e2pTx2Power1/e2pTx2Power2/e2pTx2Power3/e2pTx2Power4/e2pTx2Power5/e2pTx2Power6/e2pTx2Power7/ateTxFreqOffset/ateMode/ateBW/ateAntenna/e2pTxFreqOffset/e2pTxPwDeltaB/e2pTxPwDeltaG/e2pTxPwDeltaMix/e2pTxPwDeltaN/readE2P leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• Bond_yes (VulDB User) reporter
• VulDB CNA Team coordinator

• VDB-365406 | Edimax EW-7438RPn formWlanMP stack-based overflow
• VDB-365406 | CTI Indicators (IOB, IOC, IOA)
• Submit #813892 | Edimax EW-7438RPn 1.31 Stack-based Buffer Overflow
• https://github.com/wudipjq/my_vuln/blob/main/Edimax/vuln_8/8.md

• Stack-based Buffer Overflow CWE
• Memory Corruption CWE