by Kastro
Paper/Archive/CVE-2026-57881

CVE-2026-57881

GeoVision Inc. GV-LPCLPC2011/2211 — GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr)

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.1.511 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

Affected

ProductAffectedFixed inSource
GV-LPCLPC2011/22111.121.13CNA

Scores by source

GV (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgeovision.com.tw/cyber_security.php