CVE-2026-57874
Severity CVSS v4.0:
Pending analysis
Type:
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Publication date:
26/06/2026
Last modified:
26/06/2026
Description
An unauthenticated<br />
buffer overflow vulnerability exists in IEEE8021x_upload.cgi in GeoVision<br />
GV-LPC2011 and GV-LPC2211 V1.12 and earlier. The vulnerability is caused by<br />
insufficient bounds checking when parsing filename values in multipart upload<br />
data. A remote attacker may exploit this vulnerability by sending a crafted<br />
upload request with overly long input, causing memory corruption and resulting<br />
in a denial of service.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH