TP-Link Archer AX53 Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in the TP-Link Archer AX53 v1.0, specifically within the tmpserver modules. This vulnerability allows authenticated adjacent attackers to cause a segmentation fault or potentially execute arbitrary code. The issue arises when a specially crafted network packet exceeds the maximum expected length, leading to memory corruption.

Impact

Exploitation of this vulnerability can result in a segmentation fault or arbitrary code execution on the affected device.

Remediation

Users are advised to update to the latest firmware version. The latest firmware for the Archer AX53 v1.0 can be downloaded from the TP-Link official website.