Tenda AC18 formSetQosBand stack overflow vulnerability

Tenda AC18 is a router from Tenda, China. Tenda AC18 V15.03.05.19 is vulnerable to a stack overflow vulnerability, which stems from the formSetQosBand function not performing size checks on incoming data, and can be exploited by attackers to cause remote code execution or denial of service.