CVE-2026-34120 in Tapo C520WS
要約 (英語)
A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to
insufficient alignment and validation of buffer boundaries when processing streaming inputs.An attacker
on the same network segment could trigger heap memory corruption conditions by
sending crafted payloads that cause write operations beyond allocated buffer
boundaries. Successful exploitation
causes a Denial-of-Service (DoS) condition, causing the device’s process to
crash or become unresponsive.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
責任者
TPLink
予約する
2026年03月25日
公開
2026年04月02日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 354969 | TP-Link Tapo C520WS メモリ破損 | 122 | 未定義 | 未定義 | CVE-2026-34120 |