Description
A vulnerability was found in Shibby Tomato 1.28. This vulnerability affects the function sub_42537C of the component Scheduler Name Handler. The manipulation of the argument a1 results in stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by FreshTomato.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shibby | Tomato | 1.28 | — |
References
- VDB-379801 | Shibby Tomato Scheduler Name sub_42537C stack-based overflow vdb-entry technical-description
- VDB-379801 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-16097 | CVE Analysis and Report third-party-advisory
- Submit #855125 | Tomato by Shibby Tomato Firmware Tomato PL ND 1.28 beta Stack-based Buffer Overflow third-party-advisory
- https://gitee.com/Fengyi-Wang/CVE/issues/IJTQ5U issue-tracking