12 matches found
CVE-2026-38422
CVE-2026-38422: Ejecución remota de código mediante desbordamientos de búfer combinados en Tasmota fetchjpg CVE: CVE-2026-38422 Gravedad: Crítica CVSS 9.8 Producto: Arendst Tasmota Versión afectada: = 15.3.0.3 Archivo: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Función: fetchjpg Autor:...
CVE-2026-38427
CVE-2026-38427: Envoltura de enteros → Desbordamiento de búfer en el montón en Tasmota fetchjpg CVE: CVE-2026-38427 Gravedad: Crítico CVSS 9.8 Producto: Arendst Tasmota Versión afectada: = 15.3.0.3 Archivo: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Función: fetchjpg — caso 2 obtención de trama...
CVE-2026-38426
CVE-2026-38426: Desbordamiento de búfer de pila por strcpy en Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Gravedad: Crítica CVSS 9.8 Producto: Arendst Tasmota Versión afectada: = 15.3.0.3 Archivo: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Función: fetchjpg — caso 0 conexión inicial Autor:...
CVE-2026-38426
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv10scripter.ino, fetchjpg, jpgtask.boundary40, strcpy function...
CVE-2026-38427
An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...
CVE-2026-38422
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmotaxdrvdriver/xdrv10scripter.ino, fetchjpg function...
CVE-2026-38427: Heap-based Buffer Overflow
An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...
CVE-2026-38422
A critical buffer overflow vulnerability exists in arendst Tasmota version 15.3.0.3 and before within the fetch_jpg() function of the xdrv_10_scripter.ino file. The flaw stems from two compounding memory corruption issues: a strcpy() overflow into a 40-byte boundary buffer and a uint16_t integer ...
CVE-2026-38427
An issue in fetchjpg in xdrv10scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JPEG stream is stored in a uint16t variable; values above 65535 wrap around, causing allocation of a smaller buffer than the data actually read...
CVE-2026-38426: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv10scripter.ino, fetchjpg, jpgtask.boundary40, strcpy function...
CVE-2026-38422: Stack-based Buffer Overflow
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmotaxdrvdriver/xdrv10scripter.ino, fetchjpg function...
