VYPR
Unrated severityNVD Advisory· Published Oct 8, 2025· Updated Feb 24, 2026

Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow

CVE-2025-11418

Description

A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.