| शीर्षक | GL.iNet Router 4.8.x Cache overflow |
|---|
| विवरण | This vulnerability exists in the nas-web.get_file_list RPC interface of the APPS-NAS module. The backend response is received into a fixed 16KB buffer without proper length checking. When the response body (e.g., a directory listing with many files or long filenames) exceeds 16KB, the callback function writes beyond the buffer boundary, causing heap overflow. This results in an Internal error response or crashes the glc / NAS RPC process, making the NAS file browsing interface unavailable. A secondary issue in the request sending path may also lead to out‑of‑bounds reads. |
|---|
| स्रोत | ⚠️ https://github.com/gl-inet/CVE-issues/blob/main/4.0.0/Heap%20buffer%20overflow%20in%20nas-web.get_file_list%20leading%20to%20authenticated%20denial%20of%20service.md |
|---|
| उपयोगकर्ता | GLiNet (UID 96704) |
|---|
| सबमिशन | 05/06/2026 11:16 AM (2 महीनों पहले) |
|---|
| संयम | 02/08/2026 09:24 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385414 [GL.iNet MT2500 तक 20260707 APPS-NAS nas-web.get_file_list बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|