PT-2024-25152

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.88155 EN Description A stack-based buffer overflow issue was discovered via the mitInterface parameter in the "ip/goform/RouteStatic" API endpoint. This issue can be exploited, potentially leading to unauthorized...

PT-2024-25153

Name of the Vulnerable Software and Affected Versions Tenda FH1206 version 1.2.0.88155 EN Description A stack-based buffer overflow issue was discovered via the entrys parameter in the "ip/goform/RouteStatic" API endpoint. This issue can be exploited, potentially leading to unauthorized control...

CVE-2024-33212

The Tenda FH1206 wireless router (firmware version V1.2.0.8(8155)_EN ) is vulnerable to a stack-based buffer overflow . The root cause is a failure to properly validate the length of input data provided via the funcpara1 parameter in the ip/goform/setcfm endpoint. An attacker could exploit this v...

CVE-2024-33214

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic...

CVE-2024-33212

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm...

CVE-2024-33217: Stack-based Buffer Overflow

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat...

CVE-2024-33212: Stack-based Buffer Overflow

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm...

CVE-2024-33211: Stack-based Buffer Overflow

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex...

CVE-2024-4064: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. This vulnerability affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-4066: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda AC8 16.03.34.09. Affected is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation of the argument wanMTU/wanSpeed/cloneType/mac/serviceName/serverName leads to stack-based buffer overflow. It is...

PT-2024-4608

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: A critical issue affects the formQosManageDouble user function, allowing for a stack-based buffer overflow through the manipulation of the ssidIndex argument. This can be exploited remotely, potential...

CVE-2023-50007: Stack-based Buffer Overflow

FFmpeg v.n6.1-3-g466799d4f5 allows an attacker to trigger use of a parameter of negative size in the avsamplessetsilence function in thelibavutil/samplefmt.c:260:9 component...

CVE-2023-51792: Stack-based Buffer Overflow

Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the maximum supported size of 0x10000000000...

CVE-2023-4232 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decodestatusreport function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound...

CVE-2024-3910

A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.91307. Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-3909

A vulnerability classified as critical was found in Tenda AC500 2.0.1.91307. Affected by this vulnerability is the function formexeCommand of the file /goform/execCommand. The manipulation of the argument cmdinput leads to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2024-3910

CVE-2024-3910 affects Tenda AC500 2.0.1.9(1307). The flaw is in the fromDhcpListClient function (file /goform/DhcpListClient) where manipulating the page parameter causes a stack-based buffer overflow. Impact is described as remote code execution with high severity/impact across confidentiality, ...

CVE-2024-3905

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been classified as critical. This affects the function R7WebsSecurityHandler of the file /goform/execCommand. The manipulation of the argument password leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

CVE-2024-3906

CVE-2024-3906 affects Tenda AC500 (version 2.0.1.9(1307)) via the formQuickIndex function in /goform/QuickIndex. The root cause is a stack-based buffer overflow triggered when the PPPOEPassword parameter is manipulated, enabling remote exploitation. Publicized exploit details indicate in-the-wild...

CVE-2024-3905

CVE-2024-3905 affects Tenda AC500 2.0.1.9(1307). The flaw is in the R7WebsSecurityHandler function of the /goform/execCommand file, where manipulating the password argument causes a stack-based buffer overflow. It is exploitable remotely, and public exploits have been disclosed. Mitigations docum...