Buffer Overflow Vulnerability in Tasmota IoT Software by Arendst
CVE-2026-38422

Currently unrated

Key Information:

Vendor: Arendst
Status: Tasmota
Vendor: CVE Published:; 27 May 2026

What is CVE-2026-38422?

A buffer overflow vulnerability in Tasmota version 15.3.0.3 and earlier allows remote attackers to execute arbitrary code. This flaw exists in the fetch_jpg() function located in the xdrv_10_scripter.ino file, enabling unauthorized access and execution, which could lead to compromised IoT devices. Users of affected versions should consider updating to mitigate potential risks.

References

https://github.com/arendst/Tasmota

https://github.com/arendst/Tasmota/blob/development/tasmo...

https://github.com/sermikr0/CVE-2026-38422

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 27, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-38422 Data

JSON