Buffer Overflow Vulnerability in TP-Link Tapo C520WS Product

CVE-2026-34122

What is CVE-2026-34122?

A stack-based buffer overflow vulnerability has been found in the TP-Link Tapo C520WS device, specifically within its configuration handling module. This issue arises from inadequate input validation, allowing an attacker to exploit it by sending an overly long value for a specific configuration parameter. If successfully exploited, this flaw can cause a Denial-of-Service (DoS) condition, resulting in a crash of the service or an unexpected reboot of the device, which ultimately disrupts the availability of the product.

References