CVE-2026-71265 — Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy()

CVE-2026-71265

Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy() PUBLISHED

Description (CNA)

Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches (DS10A/KR10A/MS10A device types).

Affected (CNA)

Vendor / product	Versions
domoticz / domoticz	affected 0 through *

CWE

CWE-121

References

https://github.com/domoticz/domoticz
https://github.com/domoticz/domoticz/blob/master/hardware/MochadTCP.cpp

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.