Cpe:2.3:a:tasmota:tasmota:*:*:*:*:*:*:*:*

Tasmota versions through 16.0.0 contain a heap out-of-bounds write vulnerability in the SendReceiveDeviceGroupMessage() function that allows unauthenticated local network attackers to trigger memory corruption via crafted UDP packets.