إرسال #744108: Yonganda YAD-LOJ Camera V24.07.11 Denial of Service

An improper input validation vulnerability exists in the Yonganda YAD-LOJ camera when used with the Tuya App and Tuya SDK. The device accepts malformed JSON data for DP ID 177 (cruise_time). When such data is stored, accessing the Cruise Time configuration page in the Tuya App causes the application to freeze and crash, resulting in a denial-of-service condition at the application level.

• المصدر: ⚠️ https://github.com/deopllj/Device_CVE_Archive/blob/main/Yonganda%20YAD-LOJ%20CVE%20Doc.pdf
• المستخدم: deoplljj (UID 93356)
• ارسال: 22/01/2026 11:00 AM (5 أشهر منذ)
• الاعتدال: 03/03/2026 09:32 AM (1 month later)
• الحالة: تمت الموافقة
• إدخال VulDB: 348536 [Tuya App/SDK 24.07.11 على Android JSON Data Point cruise_time الحرمان من الخدمة]
• النقاط: 20