| शीर्षक | Tenda Shenzhen Jixiang Tengda Technology Co., Ltd. Router CH22 V1.0.0.1 V1.0.0.1 Buffer Overflow |
|---|
| विवरण | During the security assessment of the application, a critical buffer overflow vulnerability was discovered in the goform/GstDhcpSetSer endpoint. The issue originates from the formWrlExtraGet() function, which copies user-supplied input s into a fixed-size buffer v9 using strncpy without adequate bounds checking. If the input exceeds 32 bytes, it can overwrite adjacent memory, potentially leading to application crashes, memory corruption, or arbitrary code execution. This vulnerability poses a significant risk to system stability, data confidentiality, and overall network security, requiring immediate mitigation to prevent exploitation. |
|---|
| स्रोत | ⚠️ https://github.com/f000x0/cve/issues/6 |
|---|
| उपयोगकर्ता | Li Hu (UID 89284) |
|---|
| सबमिशन | 30/09/2025 11:55 AM (1 वर्ष पहले) |
|---|
| संयम | 07/10/2025 01:04 PM (7 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 326198 [Tenda CH22 1.0.0.1 /goform/GstDhcpSetSer formWrlExtraGet dips बफ़र ओवरफ़्लो] |
|---|
| अंक | 0 |
|---|