CVE-2025-14739
Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.8
- CVSS vector
- CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
- EPSS probability
- 0.21%
- CWE
- CWE-824
- Published
- 2025-12-18
- Last modified
- 2026-03-12
Affected products
- TP-Link Systems Inc. WR940N and WR941ND
Weakness type
Related vulnerabilities
- CVE-2026-88054 — Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load
- CVE-2026-67281 — Unauthenticated file read in Mikrotik RouterOS
- CVE-2026-54920 — OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize
- CVE-2026-47908 — Dreamweaver Desktop | Access of Uninitialized Pointer (CWE-824)
- CVE-2026-47320 — Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open Source...
- CVE-2026-42959 — Crash during DNSSEC validation of malicious content
- CVE-2026-39458 — BIG-IP DNS Cache vulnerability
- CVE-2026-44411 — A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5). The...