Vulnerability · Published Sep 24, 2026 · Assigned by icscert

CVE-2026-87118Botslab G980H Dashcams Out-of-bounds Write

Medium 5.7

In plain English

A medium-severity out-of-bounds write in G980H from Botslab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)5.7Medium
Exploit odds (30 days)0.2%top 85.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing functionality. An authenticated attacker with adjacent network access could submit crafted command data that corrupts memory, potentially disrupting authentication state or causing the affected process to terminate and the device to restart, resulting in a temporary denial of service.

Affected products (as reported)

VendorProductVersions
Botslab G980H 30010_QHG980HN5294SysFW+58_QHG980HMCN5291SysFW+

Weakness: CWE-787 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References