Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-57878

GV-LPC2011/LPC2211 - unauthorized buffer overflow vulnerability (thttpd)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GV

Description

An unauthenticated stack-based buffer overflow vulnerability exists in thttpd in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when processing web request parameters in a specific request path. A remote attacker may exploit this vulnerability by sending a crafted HTTP request with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPCLPC2011/2211

Default version status: unaffected

  • 1.12affected
  • 1.13unaffected

References