GCVE - cpe:2.3:a:tuya:arduino-tuyaopen:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tuya:arduino-tuyaopen:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tuya (`a1deeefb-74f8-5171-bc5c-acf580602c8f`)
Product	Arduino Tuyaopen (`dac63045-aa61-54cc-9230-f0cdd8102831`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
`pkg:github/tuya/arduino-tuyaopen`	purl2cpe	2026-07-28 16:41:08.642052

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-28522`	vulnerable	2026-06-08 07:55:15.413457	arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service MEDIUM (6.5) arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component. An attacker on the same local area network can send a large volume of malicious UDP packets that trigger a null pointer dereference, resulting in a denial-of-service condition. Published: 2026-03-15T13:36:52.798Z Updated: 2026-05-26T11:52:08.514Z Open on db.gcve.eu Reference links https://src.tuya.com/announcement/32 https://github.com/tuya/arduino-TuyaOpen https://www.vulncheck.com/advisories/arduino-tuyaopen-wifiudp-null-pointer-dereference-denial-of-service	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28521`	vulnerable	2026-06-08 07:55:15.413034	arduino-TuyaOpen TuyaIoT Out-of-Bounds Memory Read Information Disclosure HIGH (7.7) arduino-TuyaOpen before version 1.2.1 contains an out-of-bounds memory read vulnerability in the TuyaIoT component. An attacker who hijacks or controls the Tuya cloud service can issue malicious DP event data to victim devices, causing out-of-bounds memory access that may result in information disclosure or a denial-of-service condition. Published: 2026-03-15T13:35:46.217Z Updated: 2026-03-16T14:20:19.227Z Open on db.gcve.eu Reference links https://src.tuya.com/announcement/32 https://github.com/tuya/arduino-TuyaOpen https://www.vulncheck.com/advisories/arduino-tuyaopen-tuyaiot-out-of-bounds-memory-read-information-disclosure	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28520`	vulnerable	2026-06-08 07:55:15.412734	arduino-TuyaOpen WiFiMulti Single-Byte Buffer Overflow Remote Code Execution HIGH (8.4) arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow vulnerability in the WiFiMulti component. When the victim's smart hardware connects to an attacker-controlled AP hotspot, the attacker can exploit the overflow to execute arbitrary code on the affected embedded device. Published: 2026-03-15T13:35:42.482Z Updated: 2026-03-16T14:20:19.411Z Open on db.gcve.eu Reference links https://src.tuya.com/announcement/32 https://github.com/tuya/arduino-TuyaOpen https://www.vulncheck.com/advisories/arduino-tuyaopen-wifimulti-single-byte-buffer-overflow-remote-code-execution	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-28519`	vulnerable	2026-06-08 07:55:15.412350	arduino-TuyaOpen DnsServer Heap-Based Buffer Overflow Remote Code Execution HIGH (8.8) arduino-TuyaOpen before version 1.2.1 contains a heap-based buffer overflow vulnerability in the DnsServer component. An attacker on the same local area network who controls the LAN DNS server can send malicious DNS responses to overflow the heap buffer, potentially allowing execution of arbitrary code on affected embedded devices. Published: 2026-03-15T13:36:47.991Z Updated: 2026-03-16T14:20:19.096Z Open on db.gcve.eu Reference links https://src.tuya.com/announcement/32 https://github.com/tuya/arduino-TuyaOpen https://www.vulncheck.com/advisories/arduino-tuyaopen-dnsserver-heap-based-buffer-overflow-remote-code-execution	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.