CVE-2022-24027

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24027

CVE-2022-24027 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14, rooted in a buffer overflow in the GetValue path of the shared library libcommon.so. The vulnerability arises because GetValue ultimately calls cfms_mib_proc_handle with a small destination buffer, while the GetValue/Reveal flow can ...