CVE-2026-51605 Details

A stack-based buffer overflow vulnerability has been identified in the RTSP service of the Tenda CP3 V3.0 IP camera, specifically in firmware version V31.1.9.991. This vulnerability allows an unauthenticated remote attacker to cause a denial-of-service condition by sending a crafted TEARDOWN request. The RTSP service processes the request without proper length validation on the URL field, enabling the overflow by bypassing initial format checks. Exploitation leads to an immediate crash of the RTSP service, causing TCP port 554 to stop accepting connections and disrupting video streaming. The stack-based nature of the overflow also introduces a potential risk for remote code execution.