CVE-2026-12488CWE-121
GeoVision GV-VMS V20 GV-Cloud memory corruption vulnerability
Medium · published June 24, 2026
What it is
A memory corruption vulnerability exists in the GV-Cloud functionality of GeoVision GV-VMS V20 20.0.2.
A specially crafted network request can lead to a denial of service. An attacker can impersonate the legitimate server to trigger this vulnerability.
The record
Technical detail
- CVSS v3.1
- 6.2 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00335 · 25.6th percentile
- Weakness
- CWE-121 · Stack-based Buffer Overflow
- Published
- 2026-06-24T03:34Z
EPSS history
Timeline