CVE Catalog
CVE-2025-69764
CriticalSummary
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution.
Risk Assessment
An attacker could exploit this vulnerability to execute remote code on the router, potentially leading to device and network compromise.
Recommendation
Update Tenda AX3 firmware to the latest version if a patch is available; otherwise, restrict access to the admin panel and monitor traffic.
Original NVD description (English source)
Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the stbpvid stack buffer, which may result in memory corruption and remote code execution.