Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-28522

arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service

Description

arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component. An attacker on the same local area network can send a large volume of malicious UDP packets that trigger a null pointer dereference, resulting in a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tuya arduino-TuyaOpen

  • 0 to < 1.2.1affected

References