Skip to content
OpenAdvisories
High · 8.8 CVE-2025-12596 EUVD-2025-37441GHSA-m64w-vrmh-8h45

Tenda AC23 saveParentControlInfo buffer overflow

Published Nov 2, 2025 · Updated Feb 24, 2026 · Assigned by VulDB

Description

A security vulnerability has been detected in Tenda AC23 16.03.07.52. Affected is the function saveParentControlInfo of the file /goform/saveParentControlInfo. Such manipulation of the argument Time leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected products

VendorProductAffectedFixed
Tenda AC23 16.03.07.52 —

References