CVE-2025-29329 Details

A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) service of the Sagemcom F@st 3686 router, specifically in the MAGYAR_4.121.0 version. This vulnerability allows remote attackers to execute arbitrary code by sending crafted HTTP requests. The issue arises because the IPP service, enabled by default, improperly handles the 'Expect' HTTP header, allowing data to be written outside the bounds of a fixed-size array. The vulnerability is exacerbated by the absence of modern security features in the 'ippprint' binary, such as Position Independent Executable (PIE) support, Non-Executable (NX) stack protection, and stack canaries, which could have mitigated the impact of the buffer overflow.