Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-57881 EUVD-2026-39637GHSA-45jw-wjqw-9fq9

GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr)

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by GV

Description

An unauthenticated
stack-based buffer overflow vulnerability exists in vlsvr in GeoVision
GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by
insufficient length validation when processing remote login data. A remote
attacker may exploit this vulnerability by sending crafted login data with
overly long input, resulting in memory corruption, denial of service, or potentially
arbitrary code execution.

Affected products

VendorProductAffectedFixed
GeoVision GV-LPCLPC2011/2211 1.12 1.13

References