CVE-2022-25996

A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-25996

CVE-2022-25996 affects TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. Talos report TALOS-2022-1482 describes a stack-based buffer overflow in addTimeGroup invoked from the TimeGroup/TimeRule protobuf handling. Specifically, when a TimeRule.week field is populated, a strcpy into a stack buffer occurs wi...