CVE-2026-79393: Xiongmao/InterVideo Sofia IPC Pre-Auth Heap Overflow Analysis

CVE-2026-79393 Vulnerability Summary Vulnerability Overview Vulnerability Name: Xiongmao/InterVideo Sofia IPC daemon: pre-auth heap overflow in ONVIF WS-Addressing Action translation (across firmware builds) Type: Statically validated heap overflow (before SOAP request header copy) Attack Vector: Network / Unauthenticated (pre-auth) Impact: Remote Code Execution (possible) / Remote Denial of Service (reliable) CVSS v3.1: 9.8 (Critical) — Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Confirmation Status: Confirmed on real hardware (2026-08-08); SIGSEGV reproduced on build; the same bug was similarly validated on the build. Scope of Impact Affected Products: IP cameras and ONVIF products running the daemon within the Xiongmao / InterVideo ecosystem Affected Firmware: - (executable , 4.97.110.0, SHA256 `9e564535808582758958313900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713900545713

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-79393: Xiongmao/InterVideo Sofia IPC Pre-Auth Heap Overflow Analysis

More from this source