CVE-2026-38422 - Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino, fetch_jpg() function

Back Back to CVE browser

HIGH

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino, fetch_jpg() function

Published May 27, 2026

7.3

HIGH

CVSS 3.1

EPSS 0.71%

Description

Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitrary code via the tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino, fetch_jpg() function.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (4)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32691		Advisory
https://github.com/arendst/Tasmota
https://github.com/arendst/Tasmota/blob/development/tasmota/tasmota_xdrv_driver/xdrv_10_scripter.ino
https://github.com/sermikr0/CVE-2026-38422		exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 27, 2026

Updated May 28, 2026

Reserved Apr 6, 2026

Link CVE-2026-38422

CISA Vulnrichment

Updated May 28, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-38422

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 27, 2026

Updated May 28, 2026

Link EUVD-2026-32691

GitHub

No data