CVE Catalog
CVE-2026-38422
HighSummary
A Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and earlier allows a remote attacker to execute arbitrary code via the fetch_jpg() function in tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino.
Risk Assessment
An attacker can remotely take control of the device, leading to serious security threats to the system.
Recommendation
It is recommended to update to the latest version of Tasmota to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino, fetch_jpg() function.