CVE-2025-69766

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the citytag stack buffer, which may result in memory corruption and remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2026-01-21

Last modified

2026-01-22

Weaknesses

CWE-121

Affected products

• Ax3 Firmware (Tenda)

References

• https://river-brow-763.notion.site/Tenda-AX3-Buffer-Overflow-in-formGetIptv-2c9a595a7aef8043a091e6722b8e255a
• https://river-brow-763.notion.site/Tenda-AX3-Buffer-Overflow-in-formGetIptv-2c9a595a7aef8043a091e6722b8e255a?source=cop…