Vulnerabilities

TI-2026-22784 CVE-2026-28522 · GHSA-5f8w-qvc2-2v3p

arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service

LOW 31

arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00269 Published 2026-03-15 Fixed in 1.2.1 CWE-476

TI-2026-22781 CVE-2026-28519 · GHSA-8gpj-j2h5-7993

arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution

MEDIUM 40

arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00393 Published 2026-03-15 Fixed in 1.2.1 CWE-122

TI-2026-22783 CVE-2026-28521 · GHSA-r4wm-392x-hfg5

arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure

LOW 30

arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component.

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00225 Published 2026-03-15 Fixed in 1.2.1 CWE-125

TI-2026-22782 CVE-2026-28520 · GHSA-3w55-cqrx-x67w

arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution

LOW 39

arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component.

CVSS 4.0HIGH 8.6 Local No auth No interaction EPSS 0.00201 Published 2026-03-15 Fixed in 1.2.1 CWE-193

TI-2026-02985 CVE-2026-3465 · GHSA-6mgq-4h4w-378r

Tuya App/SDK JSON Data Point denial of service

MEDIUM 45

A vulnerability was determined in Tuya App and SDK 24.07.11 on Android.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00336 Published 2026-03-03 No fix listed CWE-404

TI-2025-35327 CVE-2025-56400 · GHSA-6w4j-qm3c-h3vj

Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya…

LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in the OAuth implementation of the Tuya SDK 6.5.0 for Android and iOS, affects the Tuya Smart and Smartlife mobile applications, as well as other third-party applications t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00183 Published 2025-11-24 No fix listed CWE-352

TI-2025-35370 CVE-2025-56557 · GHSA-pqxw-457f-7p9p

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged…

MEDIUM 47

An issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control Matter devices via the Matter protocol.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00312 Published 2025-09-16 No fix listed CWE-250

TI-2024-03510 CVE-2024-3764 · GHSA-46w5-56fc-wcpj

Tuya SDK MQTT Packet denial of service

MEDIUM 47

** DISPUTED ** A vulnerability classified as problematic has been found in Tuya SDK up to 5.0.x.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00587 Published 2024-04-14 No fix listed CWE-404

Vulnerabilities

Filters