All 4 CVE vulnerabilities found in arduino-TuyaOpen, with AI-generated Chinese analysis, references, and POCs.
Vendor: Tuya
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-28522 | arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service CWE-476 | 6.5 | Medium | 2026-03-15 |
| CVE-2026-28519 | arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution CWE-122 | 8.8 | High | 2026-03-15 |
| CVE-2026-28521 | arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure CWE-125 | 7.7 | High | 2026-03-15 |
| CVE-2026-28520 | arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution CWE-193 | 8.4 | High | 2026-03-15 |
All 4 known CVE vulnerabilities affecting arduino-TuyaOpen with full Chinese analysis, references, and POCs where available.