TP-Link Tapo C500 v2.0 embeds a TDP daemon that performs an out‑of‑bounds function‑pointer dispatch when it receives a UDP datagram. The dispatch causes an invalid indirect call, crashing the daemon. For the attacker this translates into a remote, unauthenticated denial‑of‑service that can be triggered with a single packet and can be repeated to keep the device offline. The flaw does not allow the attacker to gain code execution or data access, but it does interrupt normal device operation.

The affected systems are TP‑Link Tapo C500 v2.0 devices. No other vendors or versions are listed in the CNA data.

The CVSS score of 7.1 classifies the vulnerability as high severity, and the EPSS score is currently unavailable. The flaw is not listed in the CISA KEV catalog, but it can be exploited over the network through a UDP packet without authentication or prior pairing. An attacker with network access to the device can repeatedly crash the TDP daemon, causing sustained denial of service.