Heap Buffer Overflow Vulnerability in Hikvision Cameras
CVE-2026-61390

7.7HIGH

Key Information:

Vendor

Hikvision

Status
Ds-2cd Series
Ds-2de Series
Vendor
CVE Published:
22 July 2026

What is CVE-2026-61390?

A heap buffer overflow vulnerability exists in specific Hikvision camera models, enabling unauthenticated attackers to craft and send specially designed packets. Exploiting this flaw can lead to device malfunctions and potentially unauthorized access, necessitating immediate attention from users to secure their devices.

Affected Version(s)

DS-2CD Series https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

DS-2DE Series https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

References

https://www.hikvision.com/en/support/cybersecurity/securi...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Kaye of Inversus Labs
.