Out of Bounds Write Vulnerability in Botslab G980H Dash Camera Firmware
CVE-2026-87118

6.9MEDIUM

Key Information:

Vendor

Botslab

Status
G980h
Vendor
CVE Published:
24 September 2026

What is CVE-2026-87118?

The G980H dash camera firmware from Botslab is affected by an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with access to an adjacent network can exploit this issue by sending specially crafted command data. This may corrupt memory and disrupt the authentication state, causing the affected process to terminate. Consequently, this can lead to the device restarting unexpectedly, resulting in temporary denial of service and potential unauthorized access.

Affected Version(s)

G980H 30010_QHG980HN5294SysFW+

G980H 58_QHG980HMCN5291SysFW+

References

https://www.botslab.com/pages/about-botslab
https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Julian of Software Secured reported this vulnerability to CISA.
.