Out-of-Bounds Vulnerability in TP-Link Tapo C500 Device Protocol

CVE-2026-104944

What is CVE-2026-104944?

The Tapo C500 device is exposed to an out-of-bounds function-pointer dispatch vulnerability within its TDP (TP-Link Device Protocol) daemon. This flaw allows a single unauthenticated UDP datagram to cause an invalid indirect call, leading to a crash of the TDP daemon. As a result, normal device operation can be disrupted, creating a denial-of-service condition. An attacker with network access to the UDP service can exploit this vulnerability without requiring authentication or a session establishment, making the exploitation particularly concerning. Users of the Tapo C500 are advised to apply available patches promptly to mitigate this risk.

References