tcl vulnerabilities (CVE)

CVE records published for tcl, newest first. Follow to get an email when a new one appears.

3 results
7.5High
CVE-2025-55972
tcl 65c655 firmware

A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service (DoS) condition. By sending a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, a…

4.7Medium
CVE-2025-55971
tcl 65c655 firmware

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) vulnerability via the UPnP MediaRenderer service (AVTransport:1). The device ac…

Unscored
CVE-2016-2337
Ruby Ruby; Tcl Tcl/Tk

Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.

6.2%EPSS