TI-2025-22843 Aliases CVE-2025-31700 GHSA-58gx-pg7f-pm8j

Buffer overflow in Dahua IPC

LOW 39CWE-120Published 2025-07-23 · Updated 2025-07-23

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00912 60th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dahua	IPC	Affected products include certain models from the IPC-1XXX, IPC-2XXX, IPC-WX, and IPC-ECXX series, and limited to versions which build time before April 16, 2025.	—	No fix listed	CNA
Dahua	SD	Affected products include certain models from the SD3A, SD2A, SD3D, SDT2A, and SD2C series, and limited to versions which build time before April 16, 2025.	—	No fix listed	CNA

IPC VendorDahua Affected Affected products include certain models from the IPC-1XXX, IPC-2XXX, IPC-WX, and IPC-ECXX series, and limited to versions which build time before April 16, 2025. Fixed in — No fix listed CNA
SD VendorDahua Affected Affected products include certain models from the SD3A, SD2A, SD3D, SDT2A, and SD2C series, and limited to versions which build time before April 16, 2025. Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-31700
2026-10-03 Alias added: GHSA-58gx-pg7f-pm8j

References

Other 1

https://www.dahuasecurity.com/aboutUs/trustedCenter/details/775

TI-2021-12646 Improper authentication in Some Dahua IP Camera, Video Intercom, NVR, XVR devices KEVCVSS 3.1CRITICAL 9.8
TI-2021-12645 Improper authentication in Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal… KEVCVSS 3.1CRITICAL 9.8
TI-2023-03585 Dahua Smart Park Management unrestricted upload CVSS 3.1CRITICAL 9.8
TI-2024-12178 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal CVSS 4.0MEDIUM 5.3
TI-2019-02954 Missing authentication in Dahua IPC-XXBXX CVSS 3.0HIGH 7.5
TI-2025-43987 Command injection in Dahua Intelligent Connection Center CVSS 3.1CRITICAL 9.8

See all 22 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences