CVE-2026-36805

Vulnerability

Multiple buffer overflows exist in the Saveqqlist function within Shenzhen Tenda Technology Co., Ltd Tenda G0 v15.11.0.5, specifically related to the qqStr and markStr parameters. The vulnerable code path is reachable via a crafted HTTP request to the websFormDefine("L7Im",0x42d520) CGI endpoint, where user-influenced parameters are processed by websGetVar and subsequently used in sprintf calls within Saveqqlist [1].

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the affected CGI endpoint. This request must include excessively long values for the qqStr or markStr parameters, such as 'a,'*888 or more, to trigger the buffer overflow condition [1]. No specific authentication or network position is mentioned as required beyond the ability to send the HTTP request.

Impact

Successful exploitation of these buffer overflows can lead to a Denial of Service (DoS) condition. This may manifest as a process crash or general device instability, rendering the Tenda G0 device unusable [1].

Mitigation

No patched version or specific mitigation details are available in the provided references. The vulnerability was publicly disclosed on 2026-06-06 [1].