CVE Catalog
CVE-2026-38426
HighSummary
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() function.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially leading to control over the device or system.
Recommendation
It is recommended to update to the latest version of Tasmota to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the xdrv_10_scripter.ino, fetch_jpg(), jpg_task.boundary[40], strcpy() function.