CVE-2025-8065: tp-link systems inc. tapo c200 v3 Stack-based Buffer Overflow

Vulnerability summary

CVE-2025-8065 is a high (CVSS 8.7) Stack-based Buffer Overflow vulnerability in tp-link systems inc. tapo c200 v3. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.9% of scored vulnerabilities.

Timeline

1. 20-12-2025
   PublishedVulnerability first disclosed.
2. 03-04-2026
   Last modifiedVulnerability information updated.

Description

A stack-based buffer overflow vulnerability was identified in the ONVIF SOAP XML Parser in Tapo C200 v3 and C520WS v2.6. When processing XML tags with namespace prefixes, the parser fails to validate the prefix length before copying it to a fixed-size stack buffer. It allowed a crafted SOAP request with an oversized namespace prefix to cause memory corruption in stack. An unauthenticated attacker on the same local network may exploit this flaw to enable remote code execution with elevated privileges, leading to full compromise of the device.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
• CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.