Stack Buffer Overflow in GeoVision Camera Video Server

CVE-2026-88289 is a stack buffer overflow vulnerability in GeoVision GV-LPC2211 camera firmware (V1.14, build 260903) affecting the VLSVR (Video Live Server) request handlers. The flaw stems from inadequate validation of variable-length attacker-controlled fields before copying them into fixed-size stack buffers, enabling unauthenticated remote attackers to trigger denial-of-service conditions by crashing the VLSVR service. This impacts surveillance infrastructure operators relying on GeoVision network cameras, as compromised availability can blind security monitoring systems during critical incidents. With a CVSS score of 7.5 (high) and no authentication required, the attack surface is broad—any networked GeoVision GV-LPC2211 camera is vulnerable to remote exploitation.

While this CVE maps to CWE-121 (Stack-based Buffer Overflow) rather than discrete MITRE ATT&CK techniques, Casky's Claude-powered analysis would detect exploitation patterns associated with Impact (T1531 - Account Access Removal equivalent for service disruption) and Credential Access reconnaissance phases. Practitioners using Casky would observe findings flagging: (1) unexpected network traffic to VLSVR ports with malformed request structures containing oversized payloads, (2) stack memory corruption signatures in firmware logs, and (3) repeated service restart patterns indicating crash loops. The extended reasoning capability would correlate these signals across multiple camera instances to distinguish targeted attacks from benign network faults, helping security teams prioritize patching efforts and implement compensating controls like network segmentation or WAF-style request filtering.