CVE-2026-55490

Name of the Vulnerable Software and Affected Versions OpenWrt versions prior to 25.12.5

Description An integer underflow occurs in the handle send a() function of the Emergency Access Daemon. An unauthenticated attacker on the local network can trigger this by sending a single crafted UDP packet, causing the message length to underflow before a bounds check. This underflowed value is subsequently passed to memcpy as an excessively large size, resulting in a daemon crash.

Recommendations Update to version 25.12.5.