Critical Stack Overflow Vulnerability in GeoVision GV-I/O Box 4E (CVE-2026-12485)
A critical stack overflow vulnerability (CVE-2026-12485) with a CVSS score of 10 has been discovered in GeoVision's GV-I/O Box 4E, a smart embedded device used for input and output control over Ethernet and RS-485. The vulnerability exists in the DVRSearch service, which listens for UDP messages on port 10001, allowing any network user to interact with it. Successful exploitation could lead to remote code execution, high impact on confidentiality, integrity, and availability. Affected versions include V2.09, and the vendor has released a patched version v2.12.