CVE-2026-61390
Deferred Deferred - Pending Action

Heap Buffer Overflow in Hikvision Camera Firmware

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: Hangzhou Hikvision Digital Technology Co., Ltd.

Description
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-22
Last Modified
2026-07-22
Generated
2026-08-11
AI Q&A
2026-07-22
EPSS Evaluated
2026-08-10
NVD
CVE-2026-61390
EUVD
EUVD-2026-47626

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
hikvision camera *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a heap buffer overflow vulnerability in certain Hikvision cameras. It allows unauthenticated attackers to send specially crafted network packets that trigger a buffer overflow in the device's memory. This can lead to device malfunction or potential remote code execution.

Impact Analysis

An attacker could exploit this to cause your Hikvision camera to crash, become unresponsive, or behave unpredictably. In severe cases, it might allow unauthorized access to the device or compromise its functionality.

Compliance Impact

This vulnerability may lead to unauthorized access or control of affected Hikvision cameras, potentially compromising data integrity and confidentiality. For GDPR, this could result in unauthorized processing of personal data captured by the cameras. For HIPAA, it may expose protected health information if cameras are used in healthcare settings. The impact depends on how the cameras are deployed and the data they handle.

Mitigation Strategies

Isolate affected Hikvision cameras from untrusted networks. Update firmware to the latest version if a patch is available. Monitor network traffic for unusual packets targeting camera ports. Disable unnecessary services on cameras to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-61390. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart