CVE-2026-88283: GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service
GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs network access to the ONVIF service and authenticated administrator privileges. The available information does not indicate that unauthenticated users can trigger it.
What is the operational impact of successful exploitation?
Successful exploitation can overwrite stack control state and crash the ONVIF worker, causing a denial of service. No confidentiality or integrity impact is identified in the supplied severity vector.
How can I determine whether a device is affected?
The affected software identified is GeoVision GV-LPC2211 running version V1.13. The issue is specifically associated with ONVIF CreateUsers requests containing repeated User elements.