Threats tagged 'ghsa-6g2f-6p9p-vvm8'

Tasmota firmware versions through 16.0.0 contain a heap out-of-bounds write vulnerability in the SendReceiveDeviceGroupMessage() function. This flaw allows unauthenticated attackers on the local network to send crafted UDP messages to port 4447, causing heap memory corruption by making a counter negative and exceeding a fixed buffer size. Exploitation can lead to device crashes or potentially native code execution on ESP8266 and ESP32 devices lacking certain memory protections. The vulnerability is fixed in a commit identified as e97e1e4.