CVE-2025-9780

TOTOLINK A702R (firmware 4.0.0-B20211108.1423) is affected. The vulnerability resides in /boafrm/formIpQoS, in function sub_419BE0, where improper handling of the mac argument causes a buffer overflow. The issue can be triggered remotely and has been demonstrated in the provided sources. Several ...