| عنوان | Tenda CH22 V1.0.0.1 Buffer Overflow |
|---|
| الوصف | During the security assessment of the application, a critical buffer overflow vulnerability was identified in the goform/WrlExtraGet endpoint. The vulnerability originates from the formWrlExtraGet() function, where the user-controlled chkHz parameter is appended to the fixed-size buffer v35 using strcat without enforcing proper length validation. Since v35 is limited to 2048 bytes, providing input exceeding this size can overflow the buffer and overwrite adjacent memory. This flaw can result in memory corruption, application crashes, or arbitrary code execution. The vulnerability poses significant risks to device stability, data integrity, and overall system security, and requires immediate remediation to prevent potential exploitation. |
|---|
| المصدر | ⚠️ https://github.com/f000x0/cve/issues/14 |
|---|
| المستخدم | Li Hu (UID 89284) |
|---|
| ارسال | 10/11/2025 03:58 PM (11 أشهر منذ) |
|---|
| الاعتدال | 19/11/2025 11:29 AM (9 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 332926 [Tenda CH22 1.0.0.1 /goform/WrlExtraGet formWrlExtraGet chkHz تلف الذاكرة] |
|---|
| النقاط | 20 |
|---|