Domoticz contains a stack-based buffer overflow vulnerability in the MochadTCP::MatchLine() handler for MOCHAD_RFSEC messages. The handler copies data from a network buffer of up to 1028 bytes into a fixed 50-byte stack buffer without length checking, using strcpy(). This occurs across three device type code branches. An attacker on the local network segment who can reach the Mochad TCP bridge (default port 1099, no authentication) can send a crafted packet to overflow the stack buffer, corrupting the worker thread's stack.