CVE-2025-7837 | TOTOLINK T6 4.1.5cu.748_B20211015 MQTT Service recvSlaveStaInfo dest buffer overflow

A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the component MQTT Service. The manipulation of the argument dest leads to buffer overflow.

This vulnerability is handled as CVE-2025-7837. The attack may be launched remotely. Furthermore, there is an exploit available.