CVE-2026-88290 — GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

CVE-2026-88290

GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion PUBLISHED

Description (CNA)

GeoVision GV-LPC2211 V1.14 (260903) allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources.

Affected (CNA)

Vendor / product	Versions
GeoVision Inc. / GV-LPC2011/LPC2211	affected 1.14 20260903; unaffected 1.14 20260909

CWE

CWE-400

References

https://www.geovision.com.tw/cyber_security.php

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.