Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-28520

arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution

Description

arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. When the victim's smart hardware connects to an attacker-controlled AP hotspot, the attacker can exploit the overflow to execute arbitrary code on the affected embedded device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tuya arduino-TuyaOpen

  • 0 to < 1.2.1affected

References