CVE Intelligence
Analysis AI-assisted

CVE-2026-57879: GeoVision GV-LPC2011 and GV-LPC2211 ssvr RTSP Stack-based Buffer Overflow

GeoVision GV-LPC2011 and GV-LPC2211 devices at V1.12 and earlier contain a stack-based buffer overflow in the ssvr component when it processes RTSP custom authentication data. The record gives a CVSS 3.1 base score of 9.8 (critical) and requires no authentication. The record does not list the CVE in CISA KEV, and no fixed version appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

GeoVision GV-LPC2011 and GV-LPC2211 devices at V1.12 and earlier are affected by an unauthenticated stack-based buffer overflow in the ssvr component. The flaw involves RTSP custom authentication data that is handled without adequate bounds checking.

Impact

  • Memory corruption in the affected service
  • Possible denial of service
  • Potential arbitrary code execution, as stated in the record description
  • The CVSS 3.1 base score is 9.8 (critical), with a vector indicating network reachability, low complexity, no privileges and no user interaction

Affected products and versions

  • GeoVision GV-LPC2011 and GV-LPC2211, V1.12 and earlier, as stated in the record description
  • The structured affected-product list in the record is empty, so specific hardware revisions and firmware builds are not enumerated

Exploitation status

The record does not list this CVE in CISA KEV. No confirmed exploitation appears in the sources consulted for this analysis.

Remediation and mitigation

  • Check the vendor security page for firmware updates and any fixed version, which the sources consulted do not state
  • Until a fix is applied, restrict access to the RTSP service to trusted networks and avoid exposing cameras or their management interfaces directly to the internet
  • Place affected devices in segmented networks with firewall rules that limit which hosts can reach the RTSP port
  • Inventory GV-LPC2011 and GV-LPC2211 devices and confirm their firmware versions

Detection guidance

  • Monitor for RTSP traffic from untrusted sources and for unexpected restarts or crashes of the affected service
  • Review device logs and network telemetry from camera networks for abnormal activity
  • Treat unexplained instability on these devices as a possible indicator of compromise and investigate it

Limitations of the available information

The sources consulted do not provide a fixed version, patch details, vendor advisory content, exploit maturity beyond the KEV status, or EPSS data. The vendor security page is referenced but its content was not reviewed for this analysis. Severity and affected-version statements rely on the record.

Frequently asked questions

Which GeoVision models are described as affected?

The record describes GV-LPC2011 and GV-LPC2211 at V1.12 and earlier. The structured affected-product list in the record is empty, so exact hardware revisions are not enumerated.

Is this vulnerability known to be exploited?

The record does not list this CVE in CISA KEV, and no confirmed exploitation appears in the sources consulted for this analysis.

Is a fixed firmware version available?

The sources consulted do not state a fixed version. Check the vendor security page for firmware updates and advisories.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.