| 标题 | Tenda AC18 V1.0 15.03.05.05 Stack-based Buffer Overflow |
|---|
| 描述 | A buffer overflow vulnerability has been identified in the Tenda AC18 V1.0 15.03.05.05 router firmware that allows remote attackers to potentially execute arbitrary code or cause denial of service through malformed HTTP requests. The vulnerable code path processes HTTP requests to the /goform/SetDlnaCfg. When scanList is specified with excessive data, the buffer overflow occurs during sprintf. |
|---|
| 来源 | ⚠️ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda_AC18/SetDlnaCfg/SetDlnaCfg.md |
|---|
| 用户 | z472421519 (UID 91218) |
|---|
| 提交 | 2025-12-18 16時13分 (10 月前) |
|---|
| 管理 | 2025-12-20 09時04分 (2 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 337687 [Tenda AC18 15.03.05.05 HTTP Request /goform/SetDlnaCfg sprintf scanList 内存损坏] |
|---|
| 积分 | 19 |
|---|