CVE-2025-70234 is a critical stack buffer overflow (CVSS 9.8) in the D-Link DIR-513 router, version 1.10. The curTime parameter sent to goform/formSetQoS is not bounded. The record names no fixed firmware, so check the D-Link security bulletin and plan for replacement.
What's affected
- D-Link DIR-513 firmware v1.10.
- Affected endpoint: goform/formSetQoS, parameter curTime.
- Fixed version: not stated in the record. Check the D-Link security bulletin page and the DIR-513 support page.
How to check if you're exposed
Log in to the router's administration page and read the firmware version on the status page. Version 1.10 is in scope. From the outside, check whether the router's web administration is reachable from the internet, using your public address from a network that is not your own.
Also check the age of the device. If D-Link lists the DIR-513 as retired, no update will arrive.
What to do now
- Find all DIR-513 routers on your networks and note their firmware.
- Open the D-Link security bulletin and the DIR-513 support page to see whether a patched firmware exists.
- Turn off remote administration, and limit the admin interface to a wired management host.
- Change the admin password to a long unique one.
- If no fix exists, replace the router with a supported model, and keep the old one out of service.
Home and small office routers are rarely patched, which is why they appear so often in advisories. If you manage many sites, add routers to your inventory with model and firmware fields, and set a replacement date for any that the vendor no longer supports.
Why it matters
The record maps this to CWE-121, a stack based buffer overflow, and CWE-787, an out of bounds write. The firmware copies the curTime value into a fixed size stack buffer without checking its length, so an oversized value overwrites memory next to it.
On a router that can mean a crash or code execution with high privileges. The vector shows no login and no user action are needed once the web interface is reachable. Three DIR-513 CVEs in neighbouring endpoints were published together, which suggests the same unchecked pattern across the web handlers. The record does not list this CVE as exploited in the wild.
Quick check
Is there a patch for CVE-2025-70234?
The record does not name one. Check the D-Link security bulletin, and replace the router if it is out of support.
Sources
- https://www.dlink.com/en/security-bulletin/
- https://www.dlink.com.cn/techsupport/ProductInfo.aspx?m=DIR-513
Last reviewed: 19 October 2026.
