CVE-2026-36770 Details

A stack-based buffer overflow vulnerability has been identified in the Tenda US_W3V1.0BR wireless router, specifically in version 1.0.0.3. The vulnerability arises in the ask_to_reboot function, which is part of the wireless configuration handler. The issue is triggered by user-controlled input in the GO parameter, which is processed without proper bounds checking. This allows attackers to send overly long values that overflow the stack buffer, potentially causing the device to crash or reboot, leading to a denial-of-service condition. Additionally, depending on the device's architecture and runtime protections, this vulnerability could be exploited for arbitrary code execution.