# CVE-2026-31256: A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306…

Source: https://junglewise.ai/threats/cve-2026-31256-a-null-pointer-dereference-vulnerability-exists-in-the-rtsp  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-27  
License: CC BY 4.0 with a link back

CVE-2026-31256 · Severity: high · CVSS 7.5 · Published 2026-04-27

A null pointer dereference vulnerability exists in the RTSP service of the MERCURY MIPC252W 1.0.5 Build 230306 Rel.79931n. During the processing of a SETUP request for the path rtsp://<IP>:554/stream1/track2, the device fails to properly validate the Transport header field. When this header is improperly constructed, the RTSP service can dereference a NULL pointer during request parsing. Successful exploitation causes the device to crash and automatically reboot.

Technologies: [Mercurycom Mipc252w](https://junglewise.ai/threats/technologies/mercurycom-mipc252w), [Mercurycom Mipc252w Firmware](https://junglewise.ai/threats/technologies/mipc252w-firmware). Vendors: [Mercurycom](https://junglewise.ai/threats/vendors/mercurycom).

## Quick answers

**Is CVE-2026-31256 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-31256 being exploited in the wild.

**How severe is CVE-2026-31256?** High severity, with a CVSS score of 7.5, published 27 April 2026.

**Which products and versions are affected?** Mercurycom Mipc252w, Mercurycom Mipc252w Firmware. The advisory does not name versions.

**Is there a fix for CVE-2026-31256?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-31256?** Check whether you run Mercurycom Mipc252w or Mercurycom Mipc252w Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Mercurycom Mipc252w
- Mercurycom Mipc252w Firmware

## Related threats

- [MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP…](https://junglewise.ai/threats/cve-2026-35903-mercury-mipc252w-ip-camera-1-0-5-build-230306-rel-79931n-contains)
- [The RTSP service of MERCURY IP camera MIPC252W 1.0.5 Build 230306 has an issue handling failed Digest authentication…](https://junglewise.ai/threats/cve-2026-35902-the-rtsp-service-of-mercury-ip-camera-mipc252w-1-0-5-build-230306)
- [A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated…](https://junglewise.ai/threats/cve-2026-35901-a-handling-issue-in-the-rtsp-service-of-the-mercury-mipc252w-1-0)