Cisco Talos Discloses Multiple CVEs in WolfSSL, GeoVision, VTK-DICOM (RCE, Buffer Overflow, XSS)

Vulnerability Overview Cisco Talos’s Vulnerability Discovery and Research Team has recently disclosed three vulnerabilities in WolfSSL, fourteen in GeoVision, and one in VTK-DICOM. These vulnerabilities have been patched by their respective vendors, adhering to Cisco’s third-party vulnerability disclosure policy. Impact Scope WolfSSL - Two input validation vulnerabilities (TALOS-2026-2409 (CVE-2026-28739) and TALOS-2026-2410 (CVE-2026-25106)) - One integer underflow vulnerability (TALOS-2026-2408 (CVE-2026-33091)) GeoVision - 14 vulnerabilities covering 37 CVEs: - TALOS-2026-2411 (CVE-2026-12488) Memory corruption vulnerability - TALOS-2026-2379 (CVE-2026-12486, CVE-2026-12849, CVE-2026-12850, CVE-2026-12851) OS command injection vulnerability - TALOS-2026-2377 (CVE-2026-12485, CVE-2026-12846, CVE-2026-12847, CVE-2026-12848) Buffer overflow vulnerability - TALOS-2026-2369 (CVE-2026-42370) Stack overflow vulnerability - TALOS-2026-2333 (CVE-2026-7372, CVE-2026-42369) Stack overflow vulnerability - TALOS-2026-2329 (CVE-2026-42368) Privilege escalation vulnerability - TALOS-2026-2328 (CVE-2026-42367) Privilege escalation vulnerability - TALOS-2026-2327 (CVE-2026-7371, CVE-2026-42366) Reflected cross-site scripting (XSS) vulnerability - TALOS-2025-2326 (CVE-2026-42364) OS command injection vulnerability - TALOS-2025-2332 (CVE-2026-42365) Guessable session cookie vulnerability - TALOS-2025-2322 (CVE-2026-7161) Insufficient encryption vulnerability - TALOS-2026-2375 (CVE-2026-57273, CVE-2026-57274, CVE-2026-57275, CVE-2026-57276, CVE-2026-57277, CVE-2026-57278) Stack-based buffer overflow vulnerability - TALOS-2026-2373 (CVE-2026-13131, CVE-2026-13132, CVE-2026-57264, CVE-2026-57265, CVE-2026-57266, CVE-2026-57267, CVE-2026-57268, CVE-2026-57269, CVE-2026-57270, CVE-2026-57271, CVE-2026-57272) Out-of-bounds read vulnerability - TALOS-2026-2370 (CVE-2026-13129) Lack of authentication vulnerability VTK-DICOM - One heap-based buffer overflow vulnerability (TALOS-2026-2386 (CVE-2026-22879)) Remediation WolfSSL - Two input validation vulnerabilities and one integer underflow vulnerability have been patched. GeoVision - 14 vulnerabilities covering 37 CVEs have been patched. VTK-DICOM - One heap-based buffer overflow vulnerability has been patched. Additional Information WolfSSL - Discovered by Ankur Tyagi. - WolfSSL is designed to provide "lightweight and embedded security solutions" for individuals and enterprises. GeoVision - Discovered by Philippe Lauheret. - GeoVision specializes in security technologies, including cameras and surveillance solutions, access control, and machine vision. VTK-DICOM - Discovered by Emmanuel Tacheau. - VTK is an open-source software solution for processing scientific data, used for 3D rendering tools. The VTK-DICOM API is specifically used to parse Digital Imaging and Communications in Medicine (DICOM) image data. Summary Cisco Talos’s Vulnerability Discovery and Research Team has recently disclosed multiple vulnerabilities affecting WolfSSL, GeoVision, and VTK-DICOM. These vulnerabilities have been patched by their respective vendors, adhering to Cisco’s third-party vulnerability disclosure policy. The specific vulnerabilities include input validation issues, integer underflows, memory corruption, OS command injection, buffer overflows, stack overflows, privilege escalation, reflected cross-site scripting, insufficient encryption, out-of-bounds reads, and lack of authentication.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco Talos Discloses Multiple CVEs in WolfSSL, GeoVision, VTK-DICOM (RCE, Buffer Overflow, XSS)