| शीर्षक | Tenda M3 V1.0.0.13(4903) Heap-based Buffer Overflow |
|---|
| विवरण | The formSetVlanPolicy handler in /bin/httpd is vulnerable to heap overflow due to the absence of user input sanitization and bounds checking on parameter qvlan_truck_port.
The vulnerability is in the memcpy() call performed using parameter qvlan_truck_port controlled by the user with no bounds checking.
Send a POST request to the /goform/setVlanPolicyData endpoint to trigger the heap overflow in formSetVlanPolicy |
|---|
| स्रोत | ⚠️ https://github.com/dwBruijn/CVEs/blob/main/Tenda/setVlanPolicy.md |
|---|
| उपयोगकर्ता | dwbruijn (UID 93926) |
|---|
| सबमिशन | 28/12/2025 05:26 PM (9 महीनों पहले) |
|---|
| संयम | 29/12/2025 09:01 AM (16 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338626 [Tenda M3 1.0.0.13(4903) setVlanPolicyData formSetVlanPolicy qvlan_truck_port बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|