CVE-2026-5683 - Tenda CX12L P2pListFilter fromP2pListFilter stack-based overflow

Back Back to CVE browser

MEDIUM

Tenda CX12L P2pListFilter fromP2pListFilter stack-based overflow

Published Apr 6, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.63%

Description

A vulnerability was found in Tenda CX12L 16.03.53.12. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack must originate from the local network. The exploit has been made public and could be used.

Affected products

Vendor Tenda Product CX12L Default
n/a
- Version
  16.03.53.12
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tenda

CX12L

n/a

Version	Status	Constraints
16.03.53.12	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (5)

https://github.com/cve-a/lvdan/issues/1
exploitissue-trackingIssue TrackingMitigationThird Party Advisory
https://vuldb.com/submit/792777
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355510
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355510/cti
signaturepermissions-requiredPermissions RequiredVDB Entry
https://www.tenda.com.cn/
product

Link	Providers	Tags
https://github.com/cve-a/lvdan/issues/1		exploitissue-trackingIssue TrackingMitigationThird Party Advisory
https://vuldb.com/submit/792777		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355510		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/355510/cti		signaturepermissions-requiredPermissions RequiredVDB Entry
https://www.tenda.com.cn/		product