CVE-2026-57876: CWE-787 Out-of-bounds write in GeoVision Inc. GV-LPCLPC2011/2211
An unauthenticated out-of-bounds write vulnerability exists in the onvif.cgi component of GeoVision GV-LPC2011 and GV-LPC2211 devices running version 1.12. This vulnerability arises from insufficient bounds checking when processing HTTP request body data. A remote attacker can exploit this by sending a crafted request with excessive input, causing memory corruption and resulting in a denial of service condition.
AI Analysis
Technical Summary
CVE-2026-57876 is an unauthenticated out-of-bounds write vulnerability (CWE-787) in GeoVision Inc.'s GV-LPC2011 and GV-LPC2211 devices, specifically in the onvif.cgi handler. The issue occurs due to improper bounds checking of HTTP request body data, allowing a remote attacker to send a specially crafted request with excessive input. This leads to memory corruption and causes a denial of service. The vulnerability affects version 1.12 and earlier. There is no vendor advisory or patch information available at this time.
Potential Impact
Successful exploitation results in denial of service (DoS) due to memory corruption. There is no indication of confidentiality or integrity impact. The vulnerability can be triggered remotely without authentication.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict access to the affected devices from untrusted networks to reduce exposure.
CVE-2026-57876: CWE-787 Out-of-bounds write in GeoVision Inc. GV-LPCLPC2011/2211
Description
An unauthenticated out-of-bounds write vulnerability exists in the onvif.cgi component of GeoVision GV-LPC2011 and GV-LPC2211 devices running version 1.12. This vulnerability arises from insufficient bounds checking when processing HTTP request body data. A remote attacker can exploit this by sending a crafted request with excessive input, causing memory corruption and resulting in a denial of service condition.
CVSS v3.1
Score 7.5high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-57876 is an unauthenticated out-of-bounds write vulnerability (CWE-787) in GeoVision Inc.'s GV-LPC2011 and GV-LPC2211 devices, specifically in the onvif.cgi handler. The issue occurs due to improper bounds checking of HTTP request body data, allowing a remote attacker to send a specially crafted request with excessive input. This leads to memory corruption and causes a denial of service. The vulnerability affects version 1.12 and earlier. There is no vendor advisory or patch information available at this time.
Potential Impact
Successful exploitation results in denial of service (DoS) due to memory corruption. There is no indication of confidentiality or integrity impact. The vulnerability can be triggered remotely without authentication.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, restrict access to the affected devices from untrusted networks to reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GV
- Date Reserved
- 2026-06-26T02:40:42.397Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a3e2e3e4853345fc17628e4
Added to database: 06/26/2026, 07:46:06 UTC
Last enriched: 06/26/2026, 08:01:25 UTC
Last updated: 06/26/2026, 10:26:21 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.