A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32. The application fails to validate the length of the Prot…

A buffer overflow vulnerability in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32 allows attackers to cause denial of service or achieve remote code execution. The vulnerability stems from inadequate validation of the Protocol parameter length in the Transport element. Attackers can exploit this by sending crafted SOAP requests with oversized protocol strings that overflow the stack buffer and overwrite the return instruction pointer. This enables both DoS attacks through device crashes and potential RCE within the ONVIF service context.