A vulnerability, which was classified as problematic, has been found in Tuya arduino-TuyaOpen up to 1.2.0. This issue affects some unknown processing of the component TuyaIoT. Performing a manipulation results in out-of-bounds read.
This vulnerability is known as CVE-2026-28521. Attacking locally is a requirement. No exploit is available.
It is advisable to upgrade the affected component.
