Description
A flaw has been found in Shibby Tomato 1.28 RT-N5x MIPSR2 Build 124. Affected by this issue is the function setup_conntrack of the file /sbin/rc. Executing a manipulation of the argument ct_tcp_timeout can lead to out-of-bounds write. The attack may be performed from remote. This project is superseded by FreshTomato.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shibby | Tomato | 1.28 RT-N5x MIPSR2 Build 124 | — |
References
- VDB-379799 | Shibby Tomato rc setup_conntrack out-of-bounds write vdb-entry technical-description
- VDB-379799 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-16095 | CVE Analysis and Report third-party-advisory
- Submit #855123 | Tomato by Shibby Tomato Firmware Tomato v1.28 RT-N5x MIPSR2 build 124 Mini Stack out-of-bounds write third-party-advisory
- https://gitee.com/Fengyi-Wang/CVE/issues/IJTQ5S issue-tracking