CVE-2025-9087 | Tenda AC20 16.03.08.12 SetNetControlList Endpoint set_qosMib_list stack-based overflow

A vulnerability was found in Tenda AC20 16.03.08.12. It has been declared as critical. This affects the function set_qosMib_list of the file /goform/SetNetControlList of the component SetNetControlList Endpoint. The manipulation of the argument list leads to stack-based buffer overflow.

This vulnerability is uniquely identified as CVE-2025-9087. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.