CVE-2026-3378CWE-119CWE-120

Tenda F453 qossetting fromqossetting buffer overflow

High · published March 1, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
64.6
In the wild
Unconfirmed
What it is

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01071 · 64.6th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-03-01T02:02Z
EPSS history
Timeline
  • 01 MAR 02:02Z
    Tenda F453 qossetting fromqossetting buffer overflow
    cvelistv5