CVE-2022-24024

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24024

Summary (CVE-2022-24024) : A buffer overflow exists in TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14 via the GetValue functionality. Talos analysis shows GetValue ultimately uses GetValue/GetCfmValue/ cfms_mib_proc_handle to fetch a flash value, with a path that can overwrite the return address when a ...