top of page
perceptive_background_267k.jpg

An issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap buffer overflow. The Content-Length from a JP…

Published:

26 May 2026 at 22:00:00

Alert date:

27 May 2026 at 20:13:41

Source:

nvd.nist.gov

Click to open the original link from this advisory

Mobile & IoT

A heap buffer overflow vulnerability exists in the fetch_jpg() function within xdrv_10_scripter.ino in Tasmota firmware through version 15.3.0.3. The vulnerability occurs when processing JPEG streams where the Content-Length header value exceeds 65535, causing integer overflow in a uint16_t variable. This results in allocation of a smaller buffer than the actual data being read, leading to heap corruption. Remote attackers can exploit this vulnerability to cause buffer overflow conditions. The issue affects the scripter driver component of Tasmota firmware used in IoT devices.

Technical details

Mitigation steps:

Affected products:

Tasmota

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page