Tenda AC21 router firmware version V16.03.08.16 contains a buffer overflow vulnerability in the urls parameter of the /goform/saveParentControlInfo endpoint. This flaw can be triggered remotely without authentication and may cause denial of service due to application crash. The vulnerability has a medium severity rating with no known public exploits or patches currently available.