CVE-2026-75619 - RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101
Brief
CVE ID : CVE-2026-75619
Published : Aug. 19, 2026, 6:30 p. m.
- 38 minutes ago
Description : Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes.
Successful
exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.
Severity: 6.9
- MEDIUM