{"id":"CVE-2026-71265","published":"2026-08-05T13:24:50.720","lastModified":"2026-08-10T12:17:28.937","description":"Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches (DS10A/KR10A/MS10A device types).","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-121"],"vendors":[],"products":[],"references":[{"url":"https://github.com/domoticz/domoticz","tags":[]},{"url":"https://github.com/domoticz/domoticz/blob/master/hardware/MochadTCP.cpp","tags":[]}],"exploitRefs":[{"url":"https://github.com/domoticz/domoticz","tags":[]},{"url":"https://github.com/domoticz/domoticz/blob/master/hardware/MochadTCP.cpp","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw involves an insecure use of strcpy without length checking, leading to potential stack buffer overflow when processing MOCHAD_RFSEC messages in Domoticz.","exploitability":"Exploitation requires specific device types and large input sizes, making it moderately difficult but feasible with the right conditions.","blast_radius":"If exploited, this could lead to remote code execution or service disruption affecting devices using these specific hardware types.","remediation":"Update Domoticz to a patched version that addresses the buffer overflow vulnerability in MochadTCP::MatchLine handler.","tags":["buffer-overflow","ics","rce","stack-overflow"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:59:31.146Z"}}