CVE-2026-51602: Buffer Overflow
A stack-based buffer overflow vulnerability in the RTSP service of Tenda CP3 V3.0 (firmware V31.1.9.91) allows an unauthenticated remote attacker to cause a denial of service via a crafted SETUP request. The RTSP service's second-stage URL routing parser fails to validate the length of the URL field in the first SETUP request. By supplying a URL consisting of exactly four consecutive repetitions of a valid RTSP URL, an attacker can bypass first-stage format validation and trigger a stack buffer overflow, causing an immediate crash of the RTSP service process and rendering the device inaccessible to all clients on the local network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-51602?
The severity of CVE-2026-51602 is rated as high with a CVSS score of 7.5.
What type of vulnerability is CVE-2026-51602?
CVE-2026-51602 is a stack-based buffer overflow vulnerability.
How does CVE-2026-51602 affect Tenda CP3?
CVE-2026-51602 allows an unauthenticated remote attacker to cause a denial of service on the Tenda CP3 via a crafted SETUP request.
What firmware versions are affected by CVE-2026-51602?
CVE-2026-51602 affects Tenda CP3 running firmware version V31.1.9.91.
How can I mitigate the risk of CVE-2026-51602?
To mitigate CVE-2026-51602, it is recommended to update the Tenda CP3 firmware to the latest version provided by the manufacturer.