TuyaIoT Out-of-Bounds Read in DP Event Handling

A memory out-of-bounds read vulnerability exists in the TuyaIoT DP event handling of arduino-TuyaOpen versions prior to v1.2.1. An attacker who hijacks or controls the Tuya cloud service can issue malicious DP event data to a connected device, causing out-of-bounds memory access that may lead to denial of service.