CVE-2025-51089

MediumCVSS 6.5

Published: 24/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.13%

91th percentile - higher than 91% of all known CVEs

Summary

A heap overflow vulnerability was discovered in Tenda AC8V4 firmware version V16.03.34.06 in the /goform/GetParentControlInfo function. Manipulation of the mac argument leads to a heap-based buffer overflow.

Risk Assessment

An attacker could remotely crash the device or potentially execute arbitrary code, threatening network stability and security.

Recommendation

Immediately update the firmware to the latest version available from the vendor and restrict access to the administration panel to trusted networks only.

Original NVD description (English source)

Tenda AC8V4 V16.03.34.06` was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument `mac` leads to heap-based buffer overflow.