Stack-based Buffer Overflow in Tenda AC6 Router by Tenda

CVE-2025-32010

What is CVE-2025-32010?

A stack-based buffer overflow vulnerability exists in the Cloud API functionality of Tenda AC6 routers. By sending a specially crafted HTTP response, an attacker can exploit this flaw to execute arbitrary code on the device. This vulnerability poses significant risks for users, potentially allowing unauthorized access and control over affected devices.

References