CVE-2022-24005

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24005

TCL LinkHub Mesh Wi‑Fi (MS1G_00_01.00_14) vulnerability CVE-2022-24005: GetValue in ap_steer path copies data without buffer size check, enabling a stack-based buffer overflow and potential arbitrary code execution via flash configuration values. Talos analysis details the flow: GetValue→cfms_mib...