Buffer Overflow Vulnerability in TP-Link Tapo C200 Cameras

CVE-2026-1871

What is CVE-2026-1871?

The TP-Link Tapo C200 v5 is impacted by a stack-based buffer overflow vulnerability within its RTSP authentication handling. This issue arises from inadequate validation of the lengths of the Authorization header field, which can be exploited through a specially crafted authentication request. When successfully exploited, this vulnerability causes the RTSP core service process to crash, leading to an automatic system reboot and a denial of service (DoS) condition. As a result, legitimate users are prevented from accessing the camera’s live video stream or management interface until the service restarts, significantly disrupting normal operations.

References