Approved changes feed: RSS · Atom

cpe:2.3:a:geovision_inc.:gv-lpc2011_lpc2211:1.14_20260909:*:*:*:*:*:*:*

part: a version: 1.14_20260909 update: *

VendorGeovision Inc. (1f9b8475-73fe-5d5d-9d88-a1e8ba8ee9f7)
ProductGv Lpc2011 Lpc2211 (ac8cb5d8-e3a4-59f9-860f-22b71e276e35)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-88289 not_vulnerable 2026-09-16 04:34:09.311756 GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers
HIGH (7.5)
GeoVision GV-LPC2211 V1.14 (260903) fails to validate attacker-controlled variable-length fields before copying them into fixed-size stack buffers in multiple VLSVR request handlers, allowing an unauthenticated remote attacker to crash the VLSVR service.
Published: 2026-09-10T08:25:41.380Z
Updated: 2026-09-10T15:05:16.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-88290 not_vulnerable 2026-09-16 04:34:09.232723 GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion
HIGH (7.5)
GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.
Published: 2026-09-10T08:26:16.134Z
Updated: 2026-09-10T15:04:23.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.