CVE-2026-75619

Awaiting Analysis Awaiting Analysis - Queue

Heap Overflow in Tapo C100/C101 V5 RTSP Service

Publication date: 2026-08-19

Last updated on: 2026-09-04

Assigner: TPLink

Description

Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes. Successful exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-09-04

Generated

2026-09-09

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-75619

EUVD

EUVD-2026-62634

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	tapo_c100_firmware	to 1.5.4 (exc)
tp-link	tapo_c101_firmware	to 1.5.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-122	A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

Executive Summary

CVE-2026-75619 is a heap-based buffer overflow vulnerability in the RTSP service of Tapo C100 and C101 cameras running version V5 firmware. An authenticated attacker on the local network can exploit this by sending specially crafted RTSP frame data with oversized length values, causing out-of-bounds heap writes.

Detection Guidance

Detecting this vulnerability requires monitoring RTSP traffic for malformed packets with oversized length values. Use network sniffing tools like Wireshark to capture RTSP traffic and inspect packet lengths. Check device logs for crashes or unexpected reboots, which may indicate exploitation attempts.

Impact Analysis

Successful exploitation can crash the RTSP service and force the device to reboot, resulting in a temporary denial-of-service condition. This disrupts camera functionality until the device restarts.

Compliance Impact

The vulnerability could impact compliance with GDPR and HIPAA by enabling unauthorized local network access to the device, potentially leading to data breaches or service disruptions. A temporary denial-of-service condition may affect the availability of recorded or streaming data, which is critical for compliance with data retention and accessibility requirements under these regulations.

Mitigation Strategies

Update the firmware of Tapo C100/C101 devices to version 1.5.4 Build 260528 Rel.11462n or later. Disable the RTSP service if not required. Restrict local network access to the device by configuring firewall rules to limit exposure.

Hi! I’m here to help you understand CVE-2026-75619. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70