CVE-2026-12485

Name of the Vulnerable Software and Affected Versions GV-I/O Box 4E (affected versions not specified)

Description The DVRSearch service, which runs by default on UDP port 10001, contains a stack-based buffer overflow. The issue occurs when the server processes a UDP message and performs an unsafe copy of the IP-field data into a fixed-size stack buffer using strlen() and memcpy(). A remote, unauthenticated attacker can exploit this by sending a crafted UDP packet with an overlong IP field to port 10001, potentially leading to remote code execution and full device compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.