| 标题 | Tenda i3 V1.0.0.7(3856) Buffer Overflow |
|---|
| 描述 | A stack-based buffer overflow vulnerability exists in Tenda i3 V1.0.0.7(3856) in the formWifiMacFilterSet handler at /goform/WifiMacFilterSet. The vulnerable argument is the POST parameter GO. The handler copies this parameter into a fixed-size stack buffer without validating the input length. An oversized GO value can corrupt the stack, crash the web server process, and may allow arbitrary code execution. This issue affects the same endpoint as the index variant but is independently triggerable via the GO parameter. |
|---|
| 来源 | ⚠️ https://github.com/Svigo-o/Tenda_vul/tree/main/tenda-i3-v1.0.0.7(3856)-formWifiMacFilterSet-go-buffer-overflow |
|---|
| 用户 | m202572177 (UID 95972) |
|---|
| 提交 | 2026-03-12 03時42分 (7 月前) |
|---|
| 管理 | 2026-03-27 13時49分 (15 days later) |
|---|
| 状态 | 重复 |
|---|
| VulDB条目 | 349771 [Tenda i3 1.0.0.6(2204) /goform/WifiMacFilterSet formWifiMacFilterSet index 内存损坏] |
|---|
| 积分 | 0 |
|---|