Threats Tagged 'ghsa-wqxh-m9g7-9pc2'

A buffer overflow vulnerability exists in the embedded HTTP service of TP-Link TL-WR841N v14 when processing multipart/form-data requests. The vulnerability arises from insufficient validation of an attacker-controlled boundary parameter, which may allow a remote unauthenticated attacker to corrupt memory by overwriting data beyond an internal buffer. Exploitation could lead to modification or corruption of process memory and undefined application behavior. There is no evidence of arbitrary code execution, information disclosure, or denial-of-service demonstrated. The vulnerability has a CVSS 4.0 score of 5.3, indicating medium severity.