The vulnerability is a stack‑based buffer overflow located in the fetch_jpg() function of the xdrv_10_scripter.ino module. By sending a specially crafted JPEG request, a remote attacker can overwrite the jpg_task.boundary[40] buffer and invoke the strcpy() call without bounds checking. This allows the attacker to execute arbitrary code on the Tasmota device, compromising confidentiality, integrity, and availability of the system. The vulnerability exists in Tasmota version 15.3.0.3 and all earlier releases. The CVSS score for this vulnerability is 7.3, indicating high severity.

The affected product is Arendst Tasmota firmware. Versions 15.3.0.3 and earlier are vulnerable. No specific hardware models are mentioned, so any device running these firmware versions is at risk.

The CVSS score is 7.3, indicating high severity. Because the exploit only requires sending a malformed JPEG over the network interface, the attack vector is likely remote over HTTP/HTTPS or any network protocol used by the xdrv_10_scripter module. The EPSS score is unavailable, and the vulnerability is not listed in CISA’s KEV catalog, indicating no publicly known exploits yet. However, the high potential for arbitrary code execution makes it a top‑priority vulnerability that should be remediated promptly.