GV-VMS V20 is a video monitoring software that includes a native application with an optional remote access feature via a web interface. The web server component lacks ASLR and contains a stack-based buffer overflow vulnerability in the base64 decoding logic of the 'gvapi' endpoint's authentication mechanism. This vulnerability allows an attacker to cause a stack overflow by sending a base64 decoded string larger than 256 characters, potentially leading to remote code execution with SYSTEM privileges.