CVE-2026-25263 Out of Bounds write in Linux Camera

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters...

PT-2026-106347

Name of the Vulnerable Software and Affected Versions Android Camera driver affected versions not specified Description Memory corruption occurs when the Android Camera driver processes command buffer requests that contain invalid length parameters. Recommendations At the moment, there is no...

CVE-2026-25273: Out-of-bounds Write

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...

CVE-2026-25269: Out-of-bounds Write

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size...

CVE-2026-25270: Out-of-bounds Write

Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...

PT-2026-106346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when processing camera requests. This happens when excessive batch and IO buffer configurations exceed the allocated memory size...

PT-2026-106349

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when processing camera operations. This is caused by an out-of-bounds write, which happens during driver updates. An out-of-bounds write...

PT-2026-106348

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Memory corruption occurs during camera CRE driver operations due to improper handling of buffer limits while preparing for a hardware update. Recommendations At...

CVE-2026-25272: Out-of-bounds Write

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

edisgo (0.2.0), opencv-browser-camera (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-102598 via werkzeug (2.2.0)

werkzeug PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - edisgo 0.2.0 - opencv-browser-camera =0.1.0, =0.1.2 Source cves: CVE-2026-102598 Source advisory: OSV:GHSA-G6X2-HCCM-HH4M...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: platform: exynos4-is: Added a hardware sync wait to fimcishwchangemode In fimcishwchangemode, the function changes camera modes without waiting for hardware completion. This can lead to corrupted data or a system hanging i...

CVE-2017-7921-EXP

CVE-2017-7921 Exploit Um problema de autenticação imprópria foi descoberto em dispositivos Hikvision. ​ A vulnerabilidade de autenticação imprópria ocorre quando um aplicativo não autentica os usuários de forma adequada ou correta. ​ Isso pode permitir que um usuário mal-intencionado eleve seus...

Uniview IP Cameras Classic Buffer Overflow (CVE-2021-45039)

Multiple models of the Uniview IP Camera offer an undocumented UDP service on port 7788 that allows a remote, unauthenticated attacker to overflow an internal buffer and achieve code execution. By using this buffer overflow, a remote attacker can start the telnetd service. This service has a...

CamTRON

CamTRON - Escáner de Cámaras Una herramienta automatizada para detectar dispositivos de vigilancia cámaras en redes. Características Detección multimarca : Compatible con más de 30 marcas de cámaras, incluyendo Hikvision, Dahua, Axis, CCTV y más Escaneo de alto rendimiento : Escaneo concurrente c...

EUVD-2026-90252

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

CVE-2026-101879 OpenClaw Windows Node before 2026.7.1-3 Missing Authorization

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers that allows connected gateways or agents to perform screen snapshots, camera snaps, and location captures without consent prompts. Attackers can invoke screen.snapshot,...

PT-2026-103514

Name of the Vulnerable Software and Affected Versions OpenClaw Windows Node versions prior to 2026.7.1-3 Description NodeService capture handlers lack proper authorization, allowing connected gateways or agents to perform unauthorized captures without consent prompts. An attacker can use the node...

VIVOTEK Camera Firmware

ADVISORY SUMMARY Successful exploitation of this vulnerability may allow attackers to achieve remote command execution on affected devices, potentially with root privileges, leading to full compromise of the camera system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

CVE-2026-102296 ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response

ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse that allow malicious HTTP cameras or intercepting attackers to overflow fixed-size buffers by sending oversized response headers. Attackers can send crafted HTTP responses with oversized stat...