CVE-2026-57877

Name of the Vulnerable Software and Affected Versions GeoVision GV-LPC2011 versions prior to V1.13 GeoVision GV-LPC2211 versions prior to V1.13

Description An unauthenticated format string vulnerability exists in the vlsvr component. The issue occurs due to improper handling of externally controlled input during log message formatting within the login processing path. A remote attacker can exploit this by sending crafted login data, which may lead to information disclosure, memory corruption, or a denial of service. A format string vulnerability is a type of software bug where an application fails to properly validate input used as a format string, allowing an attacker to read or write to memory.

Recommendations Update GeoVision GV-LPC2011 to a version later than V1.12. Update GeoVision GV-LPC2211 to a version later than V1.12.