CVE-2026-28522

Name of the Vulnerable Software and Affected Versions arduino-TuyaOpen versions prior to 1.2.1

Description arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference issue within the WiFiUDP component. An attacker on the same local area network can send a large volume of malicious UDP packets to cause memory exhaustion on the device. This can trigger a null pointer dereference, resulting in a denial-of-service condition.

Recommendations Versions prior to 1.2.1 should be updated to version 1.2.1 or later.