An out-of-bounds memory access vulnerability (CWE-122) exists in certain firmware versions of the Milesight MS-Cxx63-PD AIOT cameras. This vulnerability allows remote attackers to access memory beyond intended boundaries, potentially leading to memory corruption. The CVSS 4.0 score is 8.6, reflecting network attack vector, low attack complexity, no privileges required, and high impacts on confidentiality, integrity, and availability. No patch or official remediation has been announced, and no exploits are currently known in the wild.

Successful exploitation of this vulnerability could result in memory corruption, which may lead to denial of service or unauthorized access to sensitive information on affected devices. Given the high CVSS score, the impact on confidentiality, integrity, and availability is considered high. However, no active exploitation has been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should limit network exposure of affected devices and apply any recommended security best practices from the vendor. Monitor vendor communications for updates on patches or mitigations.