Tenda W3 Buffer Error Vulnerability

The Tenda W3 is a wireless access point device from the Chinese company Tenda. Version 1.0.0.32204 of the Tenda W3 Wireless Router contains a security vulnerability. This vulnerability stems from an stack overflow in the wlradio parameter within the formwrlSSIDset function, which could allow...

CVE-2025-52292

A stack buffer overflow exists in the filein_process function (located in in_file.c ) of GPAC MP4Box v2.4 . This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted MP4 file . While the vulnerability is documented across multiple sources, the...

CVE-2026-36778

The Tenda O3 Wireless Router (v1.0.0.5(4180)) is susceptible to a stack overflow vulnerability within the R7WebsSecurityHandler function. This flaw is triggered by a crafted HTTP request targeting the username parameter . A successful exploit allows an unauthenticated attacker to cause a Denial o...

CVE-2026-36798

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain multiple stack overflows in the formSetDebugCfgr function via the enable, level, and module parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36796

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36794

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...

CVE-2026-36779

Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain multiple stack overflows in the fromVirtualSer function via the puVar2, puVar1, s2, s100, and puVar3 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted...

CVE-2026-36778

Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain a stack overflow in the username parameter of the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

CVE-2026-36792

The Tenda W3 Wireless Router (version v1.0.0.3(2204) ) is vulnerable to a stack-based buffer overflow within the wl_radio parameter of the formWifiRadioSet function. An attacker can exploit this flaw by sending a crafted HTTP request to cause a Denial of Service (DoS) . No specific remediation st...

CVE-2026-36770

The Tenda US_W3V1.0BR wireless router firmware (v1.0.0.3) is affected by a stack overflow vulnerability within the ask_to_reboot function. Specifically, the flaw exists in the Go parameter , which can be triggered by a crafted input. This vulnerability allows an attacker to cause a Denial of Serv...

CVE-2026-36794

The Tenda W3 Wireless Router (version v1.0.0.3(2204) ) is vulnerable to multiple stack overflows within the R7WebsSecurityHandler function. These flaws can be triggered by processing specially crafted HTTP requests containing oversized username and password parameters. An unauthenticated attacker...

CVE-2026-36777

The Tenda W3 Wireless Router (version v1.0.0.3(2204) ) is susceptible to a stack overflow vulnerability in the param_1 parameter of the formSetCfm function. An unauthenticated attacker can exploit this flaw by sending a crafted HTTP request to cause a Denial of Service (DoS) . No specific exploit...

CVE-2026-36771

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-48184

Shenzhen Tenda Technology Co., Ltd Tenda O3v3 v1.0.0.5 was discovered to contain a stack overflow in the save list data parameter of the formSetCfm function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2026-48187

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...

PT-2026-48181

Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain multiple stack overflows in the fromVirtualSer function via the puVar2, puVar1, s2, s1 00, and puVar3 parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted...

PT-2026-48188

Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5 was discovered to contain a stack overflow in the picCropName parameter of the formCropAndSetWewifiPic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...

PT-2026-48186

Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the formwrlSSIDset function via the mit ssid and mis ssid index parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...

PT-2026-48179

Name of the Vulnerable Software and Affected Versions Tenda W3 version 1.0.0.32204 Description A stack overflow occurs in the formSetCfm function when processing the param 1 parameter. This allows an attacker to trigger a Denial of Service DoS, which is a condition where the device becomes...

PT-2026-48175

Shenzhen Tenda Technology Co., Ltd Tenda US W3V1.0BR v1.0.0.3 was discovered to contain a stack overflow in the Go parameter of the ask to reboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...