CVE-2019-25437: foscam foscam video management system Stack-based Buffer Overflow

Vulnerability summary

CVE-2019-25437 is a medium (CVSS 6.7) Stack-based Buffer Overflow vulnerability in foscam foscam video management system. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 4.5% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 20-02-2026
   PublishedVulnerability first disclosed.
2. 07-04-2026
   Last modifiedVulnerability information updated.

Description

Foscam Video Management System 1.1.6.6 contains a buffer overflow vulnerability in the UID field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 5000-character buffer into the UID parameter during device addition to trigger an application crash when the Login Check function is invoked.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).