CVE-2026-102165: CWE-121 Stack-based Buffer Overflow in Arista Networks Wi-Fi Access Points

This vulnerability (CWE-121) involves a stack-based buffer overflow in the capture service of Arista Networks Wi-Fi Access Points. An unauthenticated attacker with network access can exploit this by sending a crafted packet when the device is operating in a rarely used non-default streaming mode. Successful exploitation may lead to denial of service (service crash) or remote code execution. The vulnerability affects versions from 1.0.0 up to and including 21.3.0M-13, and from 22.0.0 up to and including 22.0.1F-32.

An attacker can cause the capture service on affected Arista Wi-Fi Access Points to crash, resulting in denial of service. More critically, the attacker may achieve remote code execution, potentially compromising the device. The attack requires network access and use of a non-default streaming mode, which may limit exploitability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the capture service and avoid enabling the uncommon non-default streaming mode to reduce exposure.