PT-2026-43710
CVE-2026-38426
·
Published
2026-05-27
·
Updated
2026-05-27
Description by
CVSS 3.1
7.3
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
arendst Tasmota versions prior to 15.3.0.4
Description
A buffer overflow allows a remote attacker to execute arbitrary code. This occurs through the
strcpy() function within fetch jpg() in the xdrv 10 scripter.ino file, specifically affecting the jpg task.boundary[40] variable.Recommendations
Update arendst Tasmota to version 15.3.0.4 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾