提交 #834887: Tenda HG10 HG7_HG9_HG10re_300001138_en_xpon stack-based buffer overflow

# Tenda HG10 Stack-based Buffer Overflow Vulnerability

## Summary

A stack-based buffer overflow vulnerability exists in the asp_voip_OtherSet interface via the funckey_transfer parameter exposed through the web management interface /boaform/voip_other_set of the Tenda HG10 router.

## Vendor

Tenda

## Product

HG10

## Affected Version

HG7_HG9_HG10re_300001138_en_xpon

## Vulnerability Type

Stack-based Buffer Overflow

## Affected Interface

/boaform/voip_other_set

## Affected Function

asp_voip_OtherSet

## Affected Parameter

funckey_transfer

## Description

A stack-based buffer overflow vulnerability exists in the asp_voip_OtherSet interface via the funckey_transfer parameter exposed through the web management interface /boaform/voip_other_set of the Tenda HG10 router.

## Impact

An attacker with access to the web management interface may be able to trigger a denial of service or potentially execute arbitrary code depending on the runtime environment and protections.

## Disclosure

This vulnerability is submitted through VulDB for CVE assignment.

## Assets

Relevant screenshots and supporting materials are stored in the assets directory.

• 来源: ⚠️ https://github.com/ssaaaa1234/tenda-hg10-voip-other-set-stack-overflow
• 用户: moist (UID 98412)
• 提交: 2026-05-21 11時53分 (19 日前)
• 管理: 2026-06-07 15時22分 (17 days later)
• 状态: 已接受
• VulDB条目: 369118 [Tenda HG7HG9/HG10 300001138_en_xpon Web Management Interface /boaform/voip_other_set asp_voip_OtherSet funckey_transfer 内存损坏]
• 积分: 20