CVE-2025-8065
- Source
- https://cve.org/CVERecord?id=CVE-2025-8065
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8065.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-8065
- Published
- 2025-12-20T01:16:05.410Z
- Modified
- 2026-03-14T15:05:09.732802Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A buffer overflow vulnerability exists in the ONVIF XML parser of Tapo C200 V3. An unauthenticated attacker on the same local network segment can send specially crafted SOAP XML requests, causing memory overflow and device crash, resulting in denial-of-service (DoS).
- References
Affected packages
Git /
Database specific
unresolved_ranges
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.3-build_230228"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.4-build_230424"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.5-build_230717"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.7-build_230920"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.9-build_231019"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.11-build_231115"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.13-build_240327"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.14-build_240513"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.3.15-build_240715"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.4.1-build_241212"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.4.2-build_250313"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "1.4.4-build_250922"
}
]
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8065.json"