← Database

CVE-2025-12236

HIGH CVSS: 8.8 Published: 2025-10-27 Modified: 2026-06-17

Description

A vulnerability was determined in Tenda CH22 1.0.0.1. This issue affects the function fromDhcpListClient of the file /goform/DhcpListClient. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Affected Platforms

Tenda Ch22Tenda Ch22 Firmware

Weakness Type

CWE-119, CWE-120, CWE-120

References