CVE-2026-75619 PUBLISHED

RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101

Assigner: TPLink
Reserved: 18.08.2026 Published: 19.08.2026 Updated: 19.08.2026

Tapo C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP service. An authenticated attacker on the local network can send specially crafted RTSP frame data containing oversized length values, resulting in out-of-bounds heap writes.

Successful exploitation can crash the RTSP service and trigger a device reboot, resulting in a temporary denial-of-service condition.

Metrics

CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS Score: 6.9

Product Status

Vendor TP-Link Systems Inc.
Product Tapo C100 v5
Versions Default: unaffected
  • affected from 0 to 1.5.4 Build 260528 Rel.11462n (excl.)
Vendor TP-Link Systems Inc.
Product Tapo C101 v5
Versions Default: unaffected
  • affected from 0 to 1.5.4 Build 260528 Rel.11462n (excl.)

References

Problem Types

  • CWE-122 Heap-based buffer overflow CWE

Impacts

  • CAPEC-100 Overflow Buffers