CVE-2026-108984 PUBLISHED

GV-ASManager Web Server Buffer Overflow Vulnerability

Assigner: GV
Reserved: 12.10.2026 Published: 19.10.2026 Updated: 19.10.2026

A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Product Status

Vendor GeoVision Inc.
Product GV-ASManager
Versions Default: unaffected
  • Version 6.3.0 is affected
  • Version 6.4.0 is unaffected

Credits

  • Aleksandr Koshelev - https://www.linkedin.com/in/aleksandr-koshelev-30b34b171/ finder
  • crowdfense - https://www.crowdfense.com/ finder

References

Problem Types

  • CWE-121 Stack-based buffer overflow CWE

Impacts

  • CAPEC-10 Buffer Overflow via Environment Variables