Buffer Overflow Vulnerability in Tapo C200 V3 by TP-Link

CVE-2025-8065

What is CVE-2025-8065?

A buffer overflow vulnerability has been identified in the ONVIF XML parser of the Tapo C200 V3 camera by TP-Link. An unauthenticated attacker on the same local network can exploit this flaw by sending specially crafted SOAP XML requests. These requests may lead to a memory overflow, causing the device to crash and resulting in a denial-of-service condition, which impacts the camera's functionality.

References