CVE-2025-69986 Memory corruption in n/a
An attacker can trigger a stack buffer overflow in the ONVIF service via a crafted SOAP request, leading to remote code execution or device crash.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-69986?
CVE-2025-69986 is a high-severity memory corruption vulnerability in n/a, published on 27 Mar 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32. The application fails to validate the length of the Protocol parameter inside the Transport element. By sending a specially crafted SOAP request containing an oversized protocol string, an attacker can overflow the stack buffer, overwriting the return instruction pointer (RIP). This vulnerability allows for Denial of Service (DoS) via device crash or Remote Code Execution (RCE) in the context of the ONVIF service.
Which versions are affected by CVE-2025-69986?
How do I fix CVE-2025-69986?
No fix has been published for CVE-2025-69986 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-69986 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-69986 exists.
Sources
Also known as GHSA-49jc-jpfq-h27g.