CVE-2026-34120
Severity CVSS v4.0:
HIGH
Type:
CWE-122
Heap-based Buffer Overflow
Publication date:
02/04/2026
Last modified:
03/04/2026
Description
A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to<br />
insufficient alignment and validation of buffer boundaries when processing streaming inputs.An attacker<br />
on the same network segment could trigger heap memory corruption conditions by<br />
sending crafted payloads that cause write operations beyond allocated buffer<br />
boundaries. Successful exploitation<br />
causes a Denial-of-Service (DoS) condition, causing the device’s process to<br />
crash or become unresponsive.
Impact
Base Score 4.0
7.10
Severity 4.0
HIGH