# CVE-2026-57881: GeoVision GV-LPC2011 and GV-LPC2211 stack overflow in vlsvr

Source: https://junglewise.ai/threats/cve-2026-57881-geovision-gv-lpc2011-and-gv-lpc2211-stack-overflow-in-vlsvr  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-26. Updated: 2026-06-26  
License: CC BY 4.0 with a link back

CVE-2026-57881 · Severity: critical · CVSS 9.8 · Published 2026-06-26

GeoVision license plate recognition cameras are affected by a critical security flaw that allows unauthorized individuals to take control of the device. By sending specially crafted login information over the network, an attacker can cause the system to crash or execute malicious commands. This could lead to a total loss of video surveillance, unauthorized access to sensitive camera feeds, or the device being used as a foothold to attack other parts of the corporate network.

Technologies: [Geovision Gv-Lpc2011](https://junglewise.ai/threats/technologies/gv-lpc2011), [Geovision Gv-Lpc2211](https://junglewise.ai/threats/technologies/gv-lpc2211). Vendors: [Geovision](https://junglewise.ai/threats/vendors/geovision).

## Quick answers

**Is CVE-2026-57881 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-57881 being exploited in the wild.

**How severe is CVE-2026-57881?** Critical severity, with a CVSS score of 9.8, published 26 June 2026.

**Which products and versions are affected?** Geovision Gv-Lpc2011 V1.12 and earlier; Geovision Gv-Lpc2211 V1.12 and earlier.

**Is there a fix for CVE-2026-57881?** A patch was published on 2026-06-26: Firmware V1.13 released to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-57881 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2026-57881?** Check whether you run Geovision Gv-Lpc2011 or Geovision Gv-Lpc2211 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow vulnerability (CWE-121) exists in the 'vlsvr' service of GeoVision GV-LPC2011 and GV-LPC2211 license plate recognition cameras. The flaw is rooted in insufficient length validation when the service processes remote login data. A remote, unauthenticated attacker can exploit this by sending crafted login packets containing overly long input strings. Successful exploitation can lead to memory corruption, resulting in a denial of service (DoS) or arbitrary code execution with the privileges of the affected service. The vulnerability is addressed in firmware version 1.13.

## Affected products

- GeoVision GV-LPC2011 V1.12 and earlier
- GeoVision GV-LPC2211 V1.12 and earlier

## Timeline

- 2026-06-26: advisory: NVD publication date
- 2026-06-26: disclosed: CVE record published by GeoVision (CNA)
- 2026-06-26: patched: Firmware V1.13 released to address the issue

## References

- [https://www.geovision.com.tw/cyber_security.php](https://www.geovision.com.tw/cyber_security.php)

## Related threats

- [GeoVision GV-LPC2211 unbounded frame length denial of service](https://junglewise.ai/threats/cve-2026-88290-geovision-gv-lpc2211-unbounded-frame-length-denial-of-service)
- [GeoVision GV-LPC2211 stack buffer overflow in VLSVR request handlers](https://junglewise.ai/threats/cve-2026-88289-geovision-gv-lpc2211-stack-buffer-overflow-in-vlsvr-request)
- [GeoVision GV-LPC2211 path traversal in BKDownloadLink.cgi](https://junglewise.ai/threats/cve-2026-88288-geovision-gv-lpc2211-path-traversal-in-bkdownloadlink-cgi)
- [GeoVision GV-LPC2211 stack overflow in ONVIF WS-Discovery](https://junglewise.ai/threats/cve-2026-88287-geovision-gv-lpc2211-stack-overflow-in-onvif-ws-discovery)
- [GeoVision GV-LPC2211 PTZ connection state denial of service](https://junglewise.ai/threats/cve-2026-88286-geovision-gv-lpc2211-ptz-connection-state-denial-of-service)