जमा करें #834888: Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon stack-based buffer overflow

# Tenda HG10 Stack-based Buffer Overflow Vulnerability

## Summary

A stack-based buffer overflow vulnerability exists in the formDOMAINBLK interface via the blkDomain parameter exposed through the web management interface /boaform/formDOMAINBLK of the Tenda HG10 router.

## Vendor

Tenda

## Product

HG10

## Affected Version

HG7_HG9_HG10re_300001138_en_xpon

## Vulnerability Type

Stack-based Buffer Overflow

## Affected Interface

/boaform/formDOMAINBLK

## Affected Function

formDOMAINBLK

## Affected Parameter

blkDomain

## Description

A stack-based buffer overflow vulnerability exists in the formDOMAINBLK interface via the blkDomain parameter exposed through the web management interface /boaform/formDOMAINBLK of the Tenda HG10 router.

The vulnerable code copies user-controlled blkDomain input into a stack buffer without effective length validation, which may overwrite the stack frame.

## Impact

An unauthenticated attacker with access to the web management interface may be able to trigger a denial of service by crashing the Boa web service or potentially execute arbitrary code depending on the runtime environment and protections.

## Disclosure

This vulnerability is submitted through VulDB for CVE assignment.

## Assets

Relevant screenshots and supporting materials are stored in the assets directory.

• स्रोत: ⚠️ https://github.com/ssaaaa1234/Tenda-HG10-formDOMAINBLK-stack-overflow-2
• उपयोगकर्ता: moist (UID 98412)
• सबमिशन: 21/05/2026 11:56 AM (18 दिन पहले)
• संयम: 07/06/2026 03:23 PM (17 days later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 369119 [Tenda HG7HG9/HG10 300001138_en_xpon /boaform/formDOMAINBLK blkDomain बफ़र ओवरफ़्लो]
• अंक: 20