CVE-2026-28522 — arduino-TuyaOpen WiFiUDP Null Pointer Dereference Denial of Service
arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component. An attacker on the same local area network can send a large vol…
Published: 2026-03-15 · CVSS: 7.1 · CVSS 4.0
arduino-TuyaOpen before version 1.2.1 contains a null pointer dereference vulnerability in the WiFiUDP component. An attacker on the same local area network can send a large volume of malicious UDP packets that trigger a null pointer dereference, resulting in a denial-of-service condition.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7