Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-57879 EUVD-2026-39635GHSA-mm39-vhxr-6hjg

GV-LPC2011/LPC2211 - unauthorized buffer overflow via AuthMode/AuthValue path (ssvr)

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by GV

Description

An unauthenticated
stack-based buffer overflow vulnerability exists in ssvr in GeoVision
GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by
insufficient bounds checking when processing RTSP custom authentication data. A
remote attacker may exploit this vulnerability by sending a crafted RTSP
request, resulting in memory corruption, denial of service, or potentially
arbitrary code execution.

Affected products

VendorProductAffectedFixed
GeoVision GV-LPCLPC2011/2211 1.12 1.13

References