Buffer Overflow Vulnerability in TL-MR6400 v7 by TP-Link

CVE-2026-17250

What is CVE-2026-17250?

A stack-based buffer overflow vulnerability has been identified in the firmware update process of TL-MR6400 v7. This flaw arises from the unsafe handling of attacker-supplied metadata embedded within firmware images. Exploiting this vulnerability could enable an authenticated attacker to corrupt memory and execute arbitrary code, posing a significant risk to the integrity and security of the affected device. Users are strongly advised to apply security patches available from TP-Link to mitigate this risk.

References