Gửi #757240: Tenda AC8V4 V16.03.34.06 Stack-based Buffer Overflowthông tin

tiêu đềTenda AC8V4 V16.03.34.06 Stack-based Buffer Overflow
Mô tảAn issue was discovered in Tenda AC8V4 V16.03.34.06. The webCgiGetUploadFile function in the httpd service fails to validate the length of the boundary parameter from the Content-Type header, allowing remote attackers to overflow a fixed-size stack buffer of 64 bytes and achieve arbitrary code execution or denial of service via a crafted POST request to /cgi-bin/UploadCfg.
Nguồn⚠️ https://github.com/master-abc/cve/issues/43
Người dùng
 942384053 (UID 94603)
Đệ trình12/02/2026 15:54 (cách đây 8 các tháng)
Kiểm duyệt23/02/2026 17:49 (11 days later)
Trạng tháiđược chấp nhận
Mục VulDB347400 [Tenda AC8 16.03.34.06 Httpd Service /cgi-bin/UploadCfg webCgiGetUploadFile boundary tràn bộ đệm]
điểm19

Want to stay up to date on a daily basis?

Enable the mail alert feature now!