Stack-Based Buffer Overflow in Tapo C320WS by TP-Link

CVE-2026-105810

What is CVE-2026-105810?

The Tapo C320WS V2.0 is exposed to a stack-based buffer overflow vulnerability within its local onboarding Wi-Fi configuration. An attacker with authentication on the adjacent network can exploit this flaw by sending a specially crafted request that includes an excessively large encrypted password field. This can lead to unintended overwriting of the stack state, granting the attacker the ability to execute arbitrary commands with root privileges. Such exploitation poses a significant risk, allowing the attacker to manipulate the camera's behavior, siphon off sensitive local configurations, and disrupt the overall availability of the device.

References