A stack-based buffer overflow exists in the formLogout function of Edimax EW‑7438RPn firmware 1.31, triggered by manipulation of the submit‑url argument. The flaw allows an attacker to supply a lengthy input that overwrites adjacent stack data, potentially leading to arbitrary code execution. The vulnerability is exploitable remotely, as the affected endpoint is reachable via the router's web interface and the exploit has been publicly disclosed.

The vulnerability affects Edimax EW‑7438RPn routers that run firmware version 1.31. No other versions are listed in the available data, but the description implies that firmware 1.31 is specifically impacted by the stack‑based overflow in formLogout.

With a CVSS score of 8.7 the flaw is classified as high severity, and the EPSS score is not available, indicating no current data on exploitation probability but not meaning the risk is low. The vulnerability is not listed in the CISA KEV catalog, yet the public disclosure and lack of vendor response suggest that the flaw could be actively exploited. Attackers can reach the vulnerable endpoint from any network that can access the router’s web interface, which is often exposed from the internet or corporate LAN.