CVE-2026-76651
Severity CVSS v4.0:
MEDIUM
Type:
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Publication date:
28/08/2026
Last modified:
28/08/2026
Description
A buffer<br />
overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing<br />
multipart/form-data requests. Insufficient validation of an attacker-controlled<br />
boundary parameter may allow a remote unauthenticated attacker to submit a<br />
crafted request that corrupts memory by overwriting data beyond the bounds of<br />
an internal buffer.<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may result in modification or corruption of process memory,<br />
potentially leading to undefined application behavior. Arbitrary code<br />
execution, information disclosure, and denial-of-service conditions have not<br />
been demonstrated.
Impact
Base Score 4.0
5.30
Severity 4.0
MEDIUM