Cylin

The issue is related to a heap overflow in the httpd module when handling the `/goform/saveParentControlInfo` API endpoint, specifically due to the `saveParentControlInfo()` function's handling of the `deviceId` parameter. This can allow a remote attacker to cause a denial of service or execute arbitrary code.

The issue is related to a stack-based buffer overflow vulnerability in the `form fast setting wifi set()` function of the Tenda AC18 router's firmware. This vulnerability is caused by an out-of-bounds write operation when processing the `ssid` parameter. Exploitation of this issue could allow a remote attacker to cause a denial of service.

The issue is related to a stack-based buffer overflow vulnerability in the `fromAddressNat()` function of the Tenda AC18 router's firmware. This vulnerability occurs when handling the `entrys` and `mitInterface` parameters, allowing an attacker to potentially cause a denial of service or execute arbitrary code remotely.

The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router when handling the /goform/SetFirewallCfg request. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.

The issue is related to a stack-based buffer overflow in the httpd module when handling the "/goform/WifiExtraSet" API endpoint. This can potentially allow an attacker to cause a denial of service.

The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router AC18. This occurs when handling the "/goform/SetClientState" request. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

The issue is related to a heap-based buffer over-write in the `tiff expand colormap()` function when parsing TIFF files. This allows attackers to cause a denial of service. The exploitation of this issue can be initiated remotely.