CVE-2026-76651
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-120
Copia de búfer sin comprobación del tamaño de entrada (Desbordamiento de búfer clásico)
Fecha de publicación:
28/08/2026
Última modificación:
28/08/2026
Descripción
*** Pendiente de traducción *** A buffer<br />
overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing<br />
multipart/form-data requests. Insufficient validation of an attacker-controlled<br />
boundary parameter may allow a remote unauthenticated attacker to submit a<br />
crafted request that corrupts memory by overwriting data beyond the bounds of<br />
an internal buffer.<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may result in modification or corruption of process memory,<br />
potentially leading to undefined application behavior. Arbitrary code<br />
execution, information disclosure, and denial-of-service conditions have not<br />
been demonstrated.
Impacto
Puntuación base 4.0
5.30
Gravedad 4.0
MEDIA