CVE-2026-3399 PUBLISHED

A vulnerability was identified in Tenda F453 1.0.0.3. Affected by this vulnerability is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer of the component httpd. The manipulation of the argument dips leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used.

• LtzHust2 (VulDB User) reporter

• VDB-348294 | Tenda F453 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow
• VDB-348294 | CTI Indicators (IOB, IOC, IOA)
• Submit #759631 | Tenda F453 v1.0.0.3 Buffer Access Using Size of Source Buffer
• https://github.com/Litengzheng/vul_db/blob/main/F453/vul_83/README.md
• https://www.tenda.com.cn/

• Buffer Overflow CWE
• Memory Corruption CWE