CVE-2026-12485

EIP tracks 1 public exploit for CVE-2026-12485. PoCs published by 0xBlackash.

AI-analyzed exploit summary The repository contains a Python script that safely checks for the presence of CVE-2026-12485 by sending benign UDP probes to the GeoVision GV-I/O Box 4E DVRSearch service. It does not exploit the vulnerability but detects if the service is active and performs safe length tests.

GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485. DVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with it. Upon receiving a UDP message, the server reads at most 1460 bytes into a local buffer and a pointer to the buffer is stored in a global variable: #### IP field stack overflow The following code is vulnerable to a stack overflow that is attacker-controlled: v3 = strlen(g_network_config->ip_addr); memcpy(&reply_buf[36], g_network_config->ip_addr, v3);