Tenda AC10 Heap-Based Buffer Overflow Vulnerability in RequestsProcessLaid

A critical heap-based buffer overflow vulnerability has been identified in the Tenda AC10 router running version 16.03.10.13. The issue arises in the file '/goform/RequestsProcessLaid', where the 'device1D' argument can be manipulated, leading to memory corruption. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by sending a POST request to '/goform/RequestsProcessLaid' with the 'device1D' parameter. The value of 'device1D' should be a large byte string, such as 100 million bytes, which will overflow the buffer and cause the router to crash.