CVE-2026-110491: Kiloview E3 NDI Encoder NULL Pointer Dereference
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiloview E3 NDI Encoderto a version that resolves this vulnerability.Fixed in V1.30
Event History
Frequently Asked Questions
Who can trigger the service disruption?
Any unauthenticated party with network access to the E3 can trigger it. No credentials or user interaction are required.
What is the operational impact on the device?
The ONVIF service becomes unresponsive and stops accepting new connections, while the rest of the device continues operating normally. The service recovers automatically after a period, but an attacker can repeatedly trigger the condition.
How can teams reduce exposure if they cannot update immediately?
Restrict network access to the device so that untrusted parties cannot reach its ONVIF service. The issue is exploitable by parties that have network access to the E3.