Tenda AX1803 adv.iptv.stballvlans parameter buffer overflow vulnerability in getIptvInfo method

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda (China). A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1. The vulnerability stems from the adv.iptv.stballvlans parameter of the getIptvInfo method failing to correctly validate the length of the input data, which can be exploited by a remote attacker to execute arbitrary code on a system or lead to denial-of-service attacks.