CVE-2026-16519
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
The GeoVision GV-IP Device Utility desktop application is vulnerable to DLL hijacking. It loads DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library.
Risk Assessment
The risk is local code execution in the context of the application, potentially leading to privilege escalation or system compromise.
Recommendation
Update the GeoVision GV-IP Device Utility to a version that loads DLLs from a secure path. As a workaround, restrict access to application directories for unprivileged users.
Other vulnerabilities in GeoVision GV-IP Device Utility
See all- CVE-2026-7161Critical
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak.
- CVE-2026-42363Critical
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak.
Original NVD description (English source)
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library location.