Stack-Based Buffer Overflow in Tenda CP3 V3.0 RTSP Service
CVE-2026-51603

7.5HIGH

Key Information:

Vendor

Tenda
Status
Tenda CP3
Vendor
CVE Published:
9 July 2026

What is CVE-2026-51603?

A stack-based buffer overflow vulnerability exists in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91). This flaw enables an unauthenticated remote attacker to disrupt service by sending a specifically crafted second SETUP request. After an initial legitimate session establishment through OPTIONS and DESCRIBE requests, the second STAGE URL routing parser incorrectly validates the length of the URL field. By exploiting this lapse with a URL containing four consecutive repetitions of a valid RTSP URL, the attacker can bypass required validations, triggering a buffer overflow that crashes the RTSP service. As a result, the device becomes inoperable to all local network clients, leading to potential service disruption.

References

https://github.com/kkkk2222874/cve_ID_report/blob/main/Te...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.