GeoVision GV-LPCLPC2011/GV-LPCLPC2211 up to 1.12 vlsvr stack-based overflow

Summaryinfo

A vulnerability classified as critical was found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12. This issue affects some unknown processing of the component vlsvr. The manipulation results in stack-based overflow. This vulnerability is identified as CVE-2026-57881. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in GeoVision GV-LPCLPC2011 and GV-LPCLPC2211 up to 1.12. It has been classified as very critical. Affected is an unknown function of the component vlsvr. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

An unauthenticated stack-based buffer overflow vulnerability exists in vlsvr in GeoVision GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by insufficient length validation when processing remote login data. A remote attacker may exploit this vulnerability by sending crafted login data with overly long input, resulting in memory corruption, denial of service, or potentially arbitrary code execution.

The weakness was released by Le Yu and Jincheng Wang. The advisory is shared for download at geovision.com.tw. This vulnerability is traded as CVE-2026-57881 since 06/26/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 06/26/2026).

Upgrading to version 1.13 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• GeoVision

Name

• GV-LPCLPC2011
• GV-LPCLPC2211

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion