CVE-2025-14739
NoneCVSS
—
EPSS
0.2%
Published
Dec 18, 2025
CISA due date
—
The record
Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109618 PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort… CWE-824
- CVE-2026-109619 PHP has various global state that temporarily points into request memory. CWE-824
- CVE-2026-88054 Tesseract is an open source OCR engine. CWE-824
- CVE-2026-54920 OpenEXR is the reference implementation and specification for the EXR image format… CWE-824
- CVE-2026-47908 Dreamweaver Desktop versions 21.7 and earlier are affected by an Access of Uninitialized… CWE-824
- CVE-2026-47320 Access of uninitialized pointer, Uncontrolled Recursion vulnerability in Samsung Open… CWE-824
- CVE-2026-42959 NLnet Labs Unbound up to and including version 1.25.0 has a denial of service… CWE-824
- CVE-2026-45736 ws is an open source WebSocket client and server for Node.js. CWE-824