TP-Link TL-WR886N Buffer Overflow Vulnerability (CNVD-2022-20072)

TP-Link TL-WR886N is a wireless router from China Pulink.A buffer overflow vulnerability exists in TP-Link TL-WR886N 20190826 version 2.3.8, which stems from the /cloud_config/router_post/upgrade_info function when executing operations on memory that do not properly validate data boundaries, an authenticated attacker could use the vulnerability to execute arbitrary code on the system via a crafted post request.