Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-57880

GV-LPC2011/LPC2211 - unauthorized buffer overflow via RTSP Digest username (ssvr)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GV

Description

An unauthenticated stack-based buffer overflow vulnerability exists in ssvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient bounds checking when parsing RTSP Digest authentication fields. A remote attacker may exploit this vulnerability by sending a crafted RTSP request containing overly long authentication data, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPCLPC2011/2211

Default version status: unaffected

  • 1.12affected
  • 1.13unaffected

References