Buffer Overflow Vulnerability in TP-Link TL-WR940N Router

CVE-2019-6989

Summary

The TP-Link TL-WR940N router is susceptible to a stack-based buffer overflow due to inadequate bounds checking in the ipAddrDispose function. This vulnerability allows a remote authenticated attacker to craft and send malicious ICMP echo request packets, potentially leading to the overflow of a buffer. Such exploitation could facilitate the execution of arbitrary code on the affected system with elevated privileges, resulting in the compromise of the device's security.

References