Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-88290

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GV

Description

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GeoVision Inc. GV-LPC2011/LPC2211

Default version status: unaffected

  • 1.14 20260903affected
  • 1.14 20260909unaffected

References