| 标题 | Yonganda YAD-LOJ Camera V24.07.11 Denial of Service |
|---|
| 描述 | An improper input validation vulnerability exists in the Yonganda YAD-LOJ camera when used with the Tuya App and Tuya SDK. The device accepts malformed JSON data for DP ID 177 (cruise_time). When such data is stored, accessing the Cruise Time configuration page in the Tuya App causes the application to freeze and crash, resulting in a denial-of-service condition at the application level. |
|---|
| 来源 | ⚠️ https://github.com/deopllj/Device_CVE_Archive/blob/main/Yonganda%20YAD-LOJ%20CVE%20Doc.pdf |
|---|
| 用户 | deoplljj (UID 93356) |
|---|
| 提交 | 2026-01-22 11時00分 (4 月前) |
|---|
| 管理 | 2026-03-03 09時32分 (1 month later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 348536 [Tuya App/SDK 24.07.11 于 Android JSON Data Point cruise_time 拒绝服务] |
|---|
| 积分 | 20 |
|---|