| タイトル | Tenda CH22 V1.0.0.1 Buffer Overflow |
|---|
| 説明 | During the security assessment of the application, a critical buffer overflow vulnerability was identified in the goform/WrlExtraGet endpoint. The vulnerability originates from the formWrlExtraGet() function, where the user-controlled chkHz parameter is appended to the fixed-size buffer v35 using strcat without enforcing proper length validation. Since v35 is limited to 2048 bytes, providing input exceeding this size can overflow the buffer and overwrite adjacent memory. This flaw can result in memory corruption, application crashes, or arbitrary code execution. The vulnerability poses significant risks to device stability, data integrity, and overall system security, and requires immediate remediation to prevent potential exploitation. |
|---|
| ソース | ⚠️ https://github.com/f000x0/cve/issues/14 |
|---|
| ユーザー | Li Hu (UID 89284) |
|---|
| 送信 | 2025年11月10日 15:58 (11 月 ago) |
|---|
| モデレーション | 2025年11月19日 11:29 (9 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 332926 [Tenda CH22 1.0.0.1 /goform/WrlExtraGet formWrlExtraGet chkHz メモリ破損] |
|---|
| ポイント | 20 |
|---|