Tenda AC15 formSetQosBand stack overflow vulnerability

Tenda AC15 is a wireless router from Tenda, China. tenda AC15 router version V15.03.05.19 is vulnerable to a stack overflow vulnerability, which stems from the formSetQosBand method with request/goform/SetNetControlList where the input data is not size-checked, and can be exploited by an attacker to cause remote code execution or denial of service.