Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-88289

GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GV

Description

GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPC2011/LPC2211

Default version status: unaffected

  • 1.14 20260903affected
  • 1.14 20260909unaffected

References