Tenda AX1803 adv.iptv.stbpvid parameter buffer overflow vulnerability in getIptvInfo method

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda (China). A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stbpvid parameter of the getIptvInfo method failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on a system or lead to a denial of service attack.