CVE-2026-36773 Details

A stack-based buffer overflow vulnerability has been identified in the Tenda W3 Wireless Router, specifically in version 1.0.0.3(2204). The issue arises in the 'ask_to_reboot' function, which is accessed through the wireless configuration handler. The vulnerability is triggered by the 'GO' parameter, which is not properly validated before being used in a formatted string operation. This oversight allows attackers to send crafted input that exceeds the buffer size, leading to a stack overflow. The exploitation of this vulnerability causes a denial-of-service condition by crashing the HTTP server and rebooting the device. Additionally, there is a potential for arbitrary code execution, depending on the device's architecture and runtime protections such as stack canaries, NX, and ASLR.