{"schema":"threatline.record/2","record":{"id":"CVE-2026-102296","aliases":["GHSA-93j4-rcp9-9jx6"],"summary":"ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response","details":"ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting attackers to overflow fixed-size buffers by sending oversized response headers. Attackers can send crafted HTTP responses with oversized status messages, Connection headers, Content-Type values, or multipart boundaries to corrupt parser state and crash the capture process or corrupt memory.","categories":["Unclassified"],"product":"zoneminder","vendor":"ZoneMinder","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102296","source_modified_at":"2026-10-06T13:36:53.153Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"zoneminder","vendor":"ZoneMinder","versions":[{"version":"0","status":"affected","versionType":"semver","lessThan":"1.38.4"},{"version":"1.38.4","status":"unaffected","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102296","source_modified_at":"2026-10-06T13:36:53.153Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"zoneminder","ecosystem":null},"version":"1.38.4","basis":"first unaffected version stated in the CVE record"}],"cvss":8.3,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00373,"percentile":0.30125,"score_date":"2026-10-23"},"published_at":"2026-09-28T22:00:19.143Z","modified_at":"2026-10-06T13:36:53.153Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-102296","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-06T13:36:53.153Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-102296","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://github.com/ZoneMinder/zoneminder/commit/2596e5fb64c0348e615577b0ab08dc38b6dc6ed8","tags":["patch"]},{"source":"CVE List","url":"https://github.com/ZoneMinder/zoneminder","tags":["product"]},{"source":"CVE List","url":"https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-93j4-rcp9-9jx6","tags":["exploit"]},{"source":"CVE List","url":"https://github.com/ZoneMinder/zoneminder/commit/813bf6f1a3ffc92c163352f2480477ba571fca5b","tags":["patch"]},{"source":"CVE List","url":"https://github.com/ZoneMinder/zoneminder/releases/tag/1.38.4","tags":["release-notes"]},{"source":"CVE List","url":"https://github.com/ZoneMinder/zoneminder/blob/1.38.3/src/zm_remote_camera_http.cpp#L736","tags":["technical-description"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/zoneminder-before-1.38.4-buffer-overflow-via-http-camera-response","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"no","technical_impact":"partial","assessed_at":"2026-09-29T19:44:10.856899Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-06T13:36:53.153Z","content_hash":"3e2f5f507e0ff40e6af3cbc322fbb1123e386eb9dc03ac818fe3dd7eee44aea7"}}