CVE-2022-24028

A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted configuration value can lead to a buffer overflow. An attacker can modify a configuration value to trigger this vulnerability.This vulnerability represents all...

CVE-2022-24028

CVE-2022-24028 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. The root cause is a buffer-overflow in the GetValue path within libcommonprod.so: GetValue invokes cfms_mib_proc_handle with a small destination buffer and, via GetCfmValue/GetValue/CFMS plumbing, can copy more data than the stack bu...