arduino-TuyaOpen 缓冲区错误漏洞

Arduino-TuyaOpen is an IoT development framework based on Arduino, open-sourced by Tuya. Versions of Arduino-TuyaOpen prior to 1.2.1 contained a buffer error vulnerability. This vulnerability stems from excessive memory access by the TuyaIoT component, which could lead to information leakage or...

CVE-2026-28521

arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud service can issue malicious DP event data to victim devices, causing out-of-bounds memory access that may result in information...

CVE-2026-28521

CVE-2026-28521 affects arduino-TuyaOpen prior to 1.2.1, where an out-of-bounds memory read in the TuyaIoT component can be triggered by malicious DP event data issued by an attacker who hijacks or controls the Tuya cloud service. Impact is information disclosure and potential denial of service. D...