Vulnerabilities

TI-2026-22784 CVE-2026-28522 · GHSA-5f8w-qvc2-2v3p

arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service

LOW 31

arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00269 Published 2026-03-15 Fixed in 1.2.1 CWE-476

TI-2026-22781 CVE-2026-28519 · GHSA-8gpj-j2h5-7993

MEDIUM 40

arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00393 Published 2026-03-15 Fixed in 1.2.1 CWE-122

TI-2026-22783 CVE-2026-28521 · GHSA-r4wm-392x-hfg5

LOW 30

arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component.

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00225 Published 2026-03-15 Fixed in 1.2.1 CWE-125

TI-2026-22782 CVE-2026-28520 · GHSA-3w55-cqrx-x67w

LOW 39

arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00201 Published 2026-03-15 Fixed in 1.2.1 CWE-193