CVE-2025-60685

CVE-2025-60685 affects Totolink A720R router firmware V4.1.5cu.614_B20230630 in the sysconf binary (sub_401EE0). The function reads /proc/stat using fgets() into a local buffer and then parses the line with sscanf() into a single-byte variable using %s, which can overflow the stack memory. This c...