Threats tagged 'ghsa-5mqq-26vj-265q'

A local stack-based buffer overflow vulnerability affects the infostat.cgi and cstecgi.cgi binaries in specific ToToLink router models. The flaw arises from improper use of sscanf() with "%s" format specifiers to parse /proc/net/arp contents into fixed-size stack buffers without length checks. This can lead to memory corruption, potentially causing denial of service or arbitrary code execution if an attacker controls /proc/net/arp data.