Skip to content
OpenAdvisories
High · 8.8 CVE-2022-23918 EUVD-2022-28838GHSA-jr8w-pq54-g8vc

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A sp…

Published Aug 5, 2022 · Updated Apr 15, 2025 · Assigned by talos

Description

A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability leverages the ethAddr field within the protobuf message to cause a buffer overflow.

Affected products

VendorProductAffectedFixed
TCL LinkHub Mesh Wifi MS1G_00_01.00_14 —

References