CVE-2026-57879: GV-LPC2011/LPC2211 - unauthorized buffer overflow via AuthMode/AuthValue path (ssvr)

Synopsis

A stack-based buffer overflow exists in the ssvr component of GeoVision GV-LPC2011 and GV-LPC2211 network cameras running firmware V1.12 and earlier. The flaw is reachable over the network with no authentication required, triggered by sending a crafted RTSP request with oversized AuthMode or AuthValue data that exceeds the bounds of a fixed stack buffer. Successful exploitation corrupts memory and can lead to arbitrary code execution, denial of service, or full device compromise. A patched-image rebuild at firmware version 1.13 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the device's RTSP service over the network; no local or physical access is needed.

• AuthenticationNot required

  No credentials are needed; the vulnerable RTSP code path is accessible before any authentication handshake completes.

• Victim interactionNot required

  Exploitation is entirely attacker-driven; no user or administrator action on the target device is required.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special conditions, race wins, or environment-specific layout knowledge.

Blast Radius

• An attacker can execute arbitrary code on the device, gaining full control over camera functions, stored footage, and any credentials held in memory.
• An attacker can read sensitive data held in the device process, including authentication tokens and network configuration.
• An attacker can modify device state or configuration, redirecting video streams or disabling recording.
• An attacker can crash the ssvr process or the device entirely, cutting off camera feeds and triggering a denial of service.