ZoneMinder versions before 1.38.4 contain static buffer overflow vulnerabilities in the RemoteCameraHttp::GetResponse() function. These vulnerabilities arise from processing oversized HTTP response headers sent by malicious HTTP cameras or intercepting attackers. Crafted HTTP responses with oversized status messages, Connection headers, Content-Type values, or multipart boundaries can corrupt parser state, leading to crashes or memory corruption in the capture process.