CVE Intelligence
Analysis AI-assisted

CVE-2026-57880: GeoVision GV-LPC2011 and GV-LPC2211 RTSP Digest Stack-Based Buffer Overflow

CVE-2026-57880 is a critical stack-based buffer overflow in the ssvr component of GeoVision GV-LPC2011 and GV-LPC2211 devices, version V1.12 and earlier. According to the record, it can be triggered without authentication by an RTSP request with overly long Digest authentication fields. The CNA rates it 9.8 (CVSS 3.1), and no confirmed exploitation appears in the sources consulted.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-57880 is a stack-based buffer overflow (CWE-121) in the ssvr component of GeoVision GV-LPC2011 and GV-LPC2211 devices. The record attributes it to insufficient bounds checking when the device parses RTSP Digest authentication fields.

Impact

According to the record's description, a remote attacker who can reach the device may cause memory corruption or denial of service, and code execution is described as potentially possible. The CNA rates the issue 9.8 under CVSS 3.1, with high confidentiality, integrity and availability impact and no privileges or user interaction required.

Affected products and versions

  • GeoVision GV-LPC2011, version V1.12 and earlier, per the description.
  • GeoVision GV-LPC2211, version V1.12 and earlier, per the description.

The structured affected-product list in the record is empty, so the exact affected range should be confirmed with the vendor.

Exploitation status

The KEV catalog does not list this CVE, and no confirmed exploitation in the wild appears in the sources consulted. The EPSS value is not available in the record.

Remediation and mitigation

  • Check the vendor security page for firmware updates and advisories: GeoVision security page.
  • The record includes no fixed version. Its absence does not mean no fix exists, so treat the fix status as unknown until the vendor confirms it.
  • Until a fix is applied, restrict network access to the camera's RTSP service and management interfaces, placing them behind segmented networks, VPNs or firewall rules that allow only trusted sources.
  • Remove direct exposure of these devices to the internet.

Detection guidance

  • Review network telemetry for unexpected inbound RTSP traffic to these devices from untrusted sources.
  • Watch for abnormal device behavior such as crashes, restarts or service unavailability, which may indicate memory corruption attempts.
  • Keep logs of device access and review them for unusual authentication activity.

Limitations of the available information

The record has no affected or fixed version data, no confirmed vendor advisory text, no EPSS or SSVC data, and no published proof of concept or exploitation evidence. The title was not provided and was written from the description. The analysis relies on the CNA-provided CVSS data and the vendor page cited above.

Frequently asked questions

What is CVE-2026-57880?

It is a critical stack-based buffer overflow in the ssvr component of GeoVision GV-LPC2011 and GV-LPC2211 devices, version V1.12 and earlier, triggered through overly long RTSP Digest authentication fields.

Is CVE-2026-57880 known to be exploited?

The record shows it is not listed in the KEV catalog, and no confirmed exploitation appears in the sources consulted.

What should administrators do now?

Restrict network access to the RTSP service and management interfaces, avoid internet exposure, and check the vendor security page for firmware updates, since the record lists no fixed version.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.