CVE-2026-57881CWE-121

GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr)

Critical · published June 26, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

An unauthenticated

stack-based buffer overflow vulnerability exists in vlsvr in GeoVision

GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by

insufficient length validation when processing remote login data. A remote

attacker may exploit this vulnerability by sending crafted login data with

overly long input, resulting in memory corruption, denial of service, or potentially

arbitrary code execution.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00649 · 50.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-06-26T07:17Z
EPSS history
Timeline
  • 26 JUN 07:17Z
    GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr)
    cvelistv5