| tiêu đề | Tenda CH22 V1.0.0.1 Buffer Overflow |
|---|
| Mô tả | During the security assessment of the application, a critical buffer overflow vulnerability was identified in the goform/WrlExtraGet endpoint. The vulnerability originates from the formWrlExtraGet() function, where the user-controlled chkHz parameter is appended to the fixed-size buffer v35 using strcat without enforcing proper length validation. Since v35 is limited to 2048 bytes, providing input exceeding this size can overflow the buffer and overwrite adjacent memory. This flaw can result in memory corruption, application crashes, or arbitrary code execution. The vulnerability poses significant risks to device stability, data integrity, and overall system security, and requires immediate remediation to prevent potential exploitation. |
|---|
| Nguồn | ⚠️ https://github.com/f000x0/cve/issues/14 |
|---|
| Người dùng | Li Hu (UID 89284) |
|---|
| Đệ trình | 10/11/2025 15:58 (cách đây 11 các tháng) |
|---|
| Kiểm duyệt | 19/11/2025 11:29 (9 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 332926 [Tenda CH22 1.0.0.1 /goform/WrlExtraGet formWrlExtraGet chkHz tràn bộ đệm] |
|---|
| điểm | 20 |
|---|