| tiêu đề | Tenda AC19 V16.03.10.07 Heap-Based Buffer Overflow (CWE-122) |
|---|
| Mô tả | A heap-based buffer overflow exists in the saveParentControlInfo handler of the Tenda AC19 web management service, tested on firmware V16.03.10.07. The unauthenticated POST endpoint /goform/saveParentControlInfo reads the user-controlled deviceId parameter and copies it with strcpy(ptr + 2, src) into a 596-byte heap allocation without checking its length. An oversized deviceId can corrupt heap memory. Testing described in the linked advisory caused the httpd service to crash and the router to reboot, resulting in a denial of service. The advisory includes technical analysis, reproduction details, and screenshots. |
|---|
| Nguồn | ⚠️ https://github.com/Tmzop/Tenda-AC19-saveParentControlInfo/blob/main/report.md |
|---|
| Người dùng | tmzhou (UID 101985) |
|---|
| Đệ trình | 15/10/2026 03:13 (cách đây 25 ngày) |
|---|
| Kiểm duyệt | 06/11/2026 18:16 (23 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 432038 [Tenda AC19 16.03.10.07 saveParentControlInfo deviceId tràn bộ đệm] |
|---|
| điểm | 20 |
|---|