CVE-2022-24008

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24008

The CVE-2022-24008 entry affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14 (confcli) and describes a buffer overflow in GetValue. Talos details show GetValue ultimately calls cfms_mib_proc_handle with a fixed 4th argument, and GetValue’s wrapper can copy data into a very small destination buffer, e...