CVE-2026-88283

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

CVE-2026-88279

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88283 GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

EUVD-2026-75317

GeoVision GV-LPC2211 V1.13 fails to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and crash the ONVIF worker...

CVE-2026-88283

GeoVision GV-LPC2211 V1.13 (and GV-LPC2011) is affected by a stack-frame overflow in the ONVIF CreateUsers service. The vulnerability is caused by a failure to limit repeated User elements in ONVIF CreateUsers requests, allowing an authenticated administrator to overwrite stack control state and ...

CVE-2026-88279

GeoVision GV-LPC2211 V1.13 is affected by a stack-frame overflow in its ONVIF CreateUsers service. Oversized username or password values are copied into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker, resulting in a denial of service on the device's ONVIF fu...

EUVD-2026-75313

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

CVE-2026-88279 GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service

GeoVision GV-LPC2211 V1.13 copies oversized ONVIF CreateUsers username or password values into fixed stack fields, allowing an authenticated administrator to crash the ONVIF worker...

TP-Link Tapo C520WS v2 stack buffer overflow vulnerability

The Tapo C520WS v2 is a TP-Link network camera used for video surveillance and ONVIF device management. The Tapo C520WS v2 has a stack buffer overflow vulnerability. This vulnerability arises due to a lack of valid boundary checks when the ONVIF CreateUsers service processes XML user nodes...

EUVD-2026-34934

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processing. An authenticated attacker can send a specially crafted ONVIF request containing an excessive...

TP-Link Tapo C520WS 安全漏洞

The Tapo C520WS v2 is a TP-Link network camera used for video surveillance and ONVIF device management. The Tapo C520WS v2 has a stack buffer overflow vulnerability. This vulnerability arises due to a lack of valid boundary checks when the ONVIF CreateUsers service processes XML user nodes...

CVE-2026-6239

Summary: A stack-based buffer overflow affects TP-Link Tapo C520WS v2 in the ONVIF CreateUsers service. The issue arises from improper validation of the number of XML user nodes during request processing. An authenticated attacker can submit a crafted ONVIF request with an excessive number of use...

CVE-2026-6239 Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS

A stack‑based buffer overflow vulnerability exists in Tapo C520WS v2 in the ONVIF CreateUsers service, where the device fails to properly validate the number of XML user nodes during request processing. An authenticated attacker can send a specially crafted ONVIF request containing an excessive...