CVE-2026-34118
Heap-Based Buffer Overflow in TP-Link Tapo C520WS Causes DoS
Publication date: 2026-04-02
Last updated on: 2026-04-06
Assigner: TPLink
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| tp-link | tapo_c520ws_firmware | to 1.2.4 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a heap-based buffer overflow found in the TP-Link Tapo C520WS device, specifically in version 2.6. It occurs in the HTTP POST body parsing logic because the software does not properly check the remaining buffer capacity after dynamically allocating memory. This insufficient boundary validation allows an attacker on the same network segment to send specially crafted HTTP requests that write data beyond the allocated buffer limits, causing heap memory corruption.
Successful exploitation of this vulnerability can cause the device's process to crash or become unresponsive, resulting in a Denial-of-Service (DoS) condition.
How can this vulnerability impact me? :
If exploited, this vulnerability can cause the affected TP-Link Tapo C520WS device to crash or become unresponsive, leading to a Denial-of-Service (DoS) condition. This means the device may stop functioning properly, disrupting its normal operation and potentially affecting any services or functions that rely on it.