9 matches found
CVE-2026-38422
CVE-2026-38422: Esecuzione di codice remoto tramite buffer overflow combinati in fetchjpg di Tasmota CVE: CVE-2026-38422 Gravità: Critica CVSS 9.8 Prodotto: Arendst Tasmota Versione interessata: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Funzione: fetchjpg Autore: Saidakbarxon...
CVE-2026-38426
CVE-2026-38426: Overflow del buffer di stack di strcpy in Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Gravità: Critica CVSS 9.8 Prodotto: Arendst Tasmota Versione interessata: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Funzione: fetchjpg — case 0 connessione iniziale Autore...
CVE-2026-38427
CVE-2026-38427: Integer Wraparound → Heap Buffer Overflow in Tasmota fetchjpg CVE: CVE-2026-38427 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 2 MJPEG frame fetch Author: Saidakbarxon...
CVE-2026-38426
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv10scripter.ino, fetchjpg, jpgtask.boundary40, strcpy function...
CVE-2026-38427
An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...
CVE-2026-38422
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmotaxdrvdriver/xdrv10scripter.ino, fetchjpg function...
CVE-2026-38427
An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...
