CVE-2025-8178

🗓️ 26 Jul 2025 04:32:10Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 44 Views🌐 WEB

Critical heap-based overflow vulnerability in Tenda AC10 allows remote attacks via device1D manipulation.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Tenda AC10 router microprogramming software, related to buffer overflow in dynamic memory, allows a hacker to execute arbitrary code or cause a service failure.	28 Jul 202500:00	–	bdu_fstec
CNNVD	Tenda AC10 安全漏洞	26 Jul 202500:00	–	cnnvd
CNVD	Tenda AC10 Buffer Overflow Vulnerability	28 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-8178 Tenda AC10 RequestsProcessLaid heap-based overflow	26 Jul 202504:32	–	cvelist
EUVD	EUVD-2025-22779	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8178	26 Jul 202505:15	–	nvd
OSV	CVE-2025-8178	26 Jul 202505:15	–	osv
Positive Technologies	PT-2025-30958 · Tenda · Tenda Ac10	24 Jul 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-8178: Heap-based Buffer Overflow	26 Jul 202500:00	–	rapid7
RedhatCVE	CVE-2025-8178	28 Jul 202504:32	–	redhatcve

NVD

Vulners

Node

AND

tenda ac10_firmwareMatch16.03.10.13

tenda ac10Match-

[
  {
    "vendor": "Tenda",
    "product": "AC10",
    "versions": [
      {
        "version": "16.03.10.13",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
yuque	www.yuque.com/ba1ma0-an29k/nnxoap/qkixf5578145igdt
tenda	www.tenda.com.cn/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
device1D	request body	/goform/RequestsProcessLaid	Heap-based buffer overflow via crafted value of device1D parameter in /goform/RequestsProcessLaid (remote exploit possible).	CWE-122, CWE-119

17 Jun 2026 10:06Current

8.2High risk

Vulners AI Score8.2

CVSS 48.7

CVSS 3.18.8

CVSS 38.8

CVSS 29

EPSS0.00833

SSVC