← CVE Intelligence

CVE-2026-16519

GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability PUBLISHED

Description (CNA)

A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location.

Affected (CNA)

Vendor / productVersions
GeoVision Inc. / GV-IP Device Utilityaffected 9.0.7.0; unaffected 9.0.8.0

CWE

CWE-427

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.