Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-75619 EUVD-2026-62634GHSA-fg6p-fqhj-j3f8

RTSP Heap Buffer Overflow Denial-of-Service Vulnerability on TP-Link Tapo C100 and C101

Published Aug 19, 2026 · Updated Aug 27, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: Tapo C100 v5 Product: Tapo C101 v5 Category: Network devices

Description

Tapo
C100/C101 V5 contains a heap-based buffer overflow vulnerability in the RTSP
service. An authenticated attacker on the local network can send specially
crafted RTSP frame data containing oversized length values, resulting in
out-of-bounds heap writes.

Successful
exploitation can crash the RTSP service and trigger a device reboot, resulting
in a temporary denial-of-service condition.

Affected products

VendorProductAffectedFixed
TP-Link Systems Tapo C100 v5 < 1.5.4 Build 260528 Rel.11462n 1.5.4 Build 260528 Rel.11462n
TP-Link Systems Tapo C101 v5 < 1.5.4 Build 260528 Rel.11462n 1.5.4 Build 260528 Rel.11462n

References