This vulnerability involves a buffer overflow in the SafeEmailFilter function of Tenda F456 firmware version 1.0.0.5. Specifically, improper handling of the 'page' argument in the /goform/SafeEmailFilter endpoint allows an attacker to cause a buffer overflow remotely. The vulnerability is classified under CWE-120 and CWE-119, which relate to classic buffer overflow issues. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been documented, and the product is not a cloud service.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected device. The high CVSS score reflects the potential for significant impact on confidentiality, integrity, and availability. However, no known active exploitation has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, users should monitor Tenda's official channels for updates. Until a patch is available, restricting network access to the device's management interface and disabling remote management features, if possible, may reduce exposure.