CVE-2018-19077: foscam c2_application_firmware Out-of-bounds Read
Vulnerability summary
CVE-2018-19077 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in foscam c2_application_firmware. EPSS estimates a 2.19% chance of exploitation in the next 30 days, higher than 82.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-11-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. RtspServer allows remote attackers to cause a denial of service (daemon hang or restart) via a negative integer in the RTSP Content-Length header.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.19%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
+0.01 pp
From 2.18% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sintonen.fi)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Foscam2 products
- c2_application_firmware2.72.1.32
- c2_system_firmware1.11.1.8
Opticam2 products
- i5_application_firmware2.21.1.128
- i5_system_firmware1.5.2.11
2 vendors · 4 products
References
1 links- sintonen.fi/advisories/foscam-ip-camera-multiple-vulnerabilities.txtX Refsource MISCExploitThird Party Advisory