Submit #719084: Tenda AC18 V1.0 15.03.05.05 Stack-based Buffer Overflowinfo

TitleTenda AC18 V1.0 15.03.05.05 Stack-based Buffer Overflow
DescriptionA buffer overflow vulnerability has been identified in the Tenda AC18 V1.0 15.03.05.05 router firmware that allows remote attackers to potentially execute arbitrary code or cause denial of service through malformed HTTP requests. The vulnerable code path processes HTTP requests to the /goform/SetDlnaCfg. When scanList is specified with excessive data, the buffer overflow occurs during sprintf.
Source⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_AC18/SetDlnaCfg/SetDlnaCfg.md
User
 z472421519 (UID 91218)
Submission12/18/2025 16:13 (6 months ago)
Moderation12/20/2025 09:04 (2 days later)
StatusAccepted
VulDB entry337687 [Tenda AC18 15.03.05.05 HTTP Request /goform/SetDlnaCfg sprintf scanList stack-based overflow]
Points19

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!