CVE-2024-46431 Memory corruption in n/a
An attacker with web portal access can trigger a buffer overflow in the delWewifiPic function, potentially leading to arbitrary code execution on the device.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-46431?
CVE-2024-46431 is a high-severity memory corruption vulnerability in n/a, published on 10 Feb 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function.
Weakness: CWE-120
Which versions are affected by CVE-2024-46431?
It affects 1 product.
Products include Tenda W18e Firmware.
How do I fix CVE-2024-46431?
No fix has been published for CVE-2024-46431 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-46431 being exploited?
There is no known exploitation of CVE-2024-46431 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4gr2-9449-vfcf.