CVE-2022-24007

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24007

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24007

TALOS reports a buffer-overflow vulnerability in TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14 caused by GetValue handling of flash config data. GetValue uses cfms_mib_proc_handle/GetCfmValue with a small 0x10-byte destination buffer, while the retrieved value can be up to 0x5dc bytes, enabling an over...