A heap buffer overflow vulnerability in the OpenWrt ubusd daemon allows authenticated local attackers to achieve arbitrary code execution and bypass security controls, warranting immediate attention.

This vulnerability involves a heap-based buffer overflow (CWE-122) within the event registration parsing code of the ubus daemon. The flaw is reachable by any authenticated ubus client and occurs before access control list (ACL) checks are processed, allowing for both memory corruption and authorization bypass.

The ability to execute arbitrary code within the context of the ubus daemon provides an attacker with significant control over the embedded device. Given the CVSS score of 7.9, this vulnerability represents a high risk that could lead to full system compromise, persistent unauthorized access, or the disruption of critical network services managed by the OpenWrt platform.

Immediate Action: Upgrade OpenWrt to version 24.10.4 or later immediately to incorporate the necessary security patches.

Proactive Monitoring: Monitor system logs for unusual crashes or unexpected behavior related to the ubus daemon, which may indicate exploitation attempts.

Compensating Controls: Ensure that access to the local bus is restricted to only necessary and trusted processes to reduce the attack surface for local users.

Public Exploit Available: Unknown

The severity of this flaw, combined with the potential for arbitrary code execution on embedded infrastructure, necessitates a prompt response. Administrators should prioritize the deployment of the 24.10.4 update across all managed OpenWrt devices to mitigate the risk of local privilege escalation and unauthorized system control.