CVE-2025-51087 is a stack-based buffer overflow vulnerability in Tenda AC8V4 firmware version 16.03.34.06. The flaw exists in the /goform/saveParentControlInfo endpoint where manipulation of the 'time' argument leads to a stack overflow condition. This vulnerability is remotely exploitable without requiring privileges or user interaction. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) reflects a network attack vector with low attack complexity, no privileges or user interaction needed, and impacts confidentiality, integrity, and availability to varying degrees.

Successful exploitation of this vulnerability can lead to a stack-based buffer overflow, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The confidentiality impact is high, meaning sensitive information could be exposed. Integrity impact is low, indicating limited ability to alter data, and availability impact is low, suggesting some potential for service disruption.

No official patch or remediation has been provided yet for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting network access to the affected device and monitor for unusual activity related to the /goform/saveParentControlInfo endpoint.