WolfSSL, Geo Vision, VTK vulnerabilities
Summary: Cisco Talos disclosed three vulnerabilities in WolfSSL, fourteen advisories covering 37 CVEs in GeoVision, and one heap-based buffer overflow in VTK-DICOM, all patched by their respective vendors. The WolfSSL findings comprise two improper input validation flaws (CVE-2026-28739, CVE-2026-25106) and one integer underflow (CVE-2026-33091), while the VTK-DICOM issue is tracked as CVE-2026-22879.
Bottom line: GeoVision sells cameras, access control, and machine-identification systems, and its 37 CVEs across 14 advisories land on devices that often sit outside routine patch cycles. The VTK-DICOM heap overflow sits in a library used to parse medical imaging data, a category where exploitation has direct patient-safety implications.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-22879CVE-2026-25106CVE-2026-28739CVE-2026-33091
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026