CVE-2026-57881: GV-LPC2011/LPC2211 - unauthorized stack-based buffer overflow vulnerability (vlsvr)

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-26 · updated 2026-10-25
Weakness: CWE-121

Description

An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

Affected products

GeoVision Inc. GV-LPCLPC2011/2211: 1.12

References

https://www.geovision.com.tw/cyber_security.php

Get alerted when CVE-2026-57881 or the next vulnerability affects your stack