CVE-2026-12848

Name of the Vulnerable Software and Affected Versions GeoVision GV-I/O Box 4E (affected versions not specified)

Description The DVRSearch service, which runs by default and listens for UDP messages on port 10001, contains a stack-based buffer overflow. The issue occurs when the server reads up to 1460 bytes into a local buffer and subsequently performs an unsafe copy of the configured DNS address into a reply buffer using memcpy() with a length derived from strlen(). An unauthenticated network attacker can send crafted UDP traffic to trigger this overflow, potentially leading to remote code execution and full compromise of confidentiality, integrity, and availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.