What is CVE-2025-31701?

CVE-2025-31701 is a high-severity vulnerability in Dahua Ipc, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.1/10. Published 2025-07-23.

How severe is CVE-2025-31701?

High severity. CVSS v3 base score is 8.1 out of 10.

Buffer overflow in Dahua Ipc

CVE-2025-31701

A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE…

Vulnerability class: Buffer Overflow

EPSS: 0.008 (52.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dahua Ipc — versions Affected products include certain models from the IPC-1XXX, IPC-2XXX, IPC-WX, and IPC-ECXX series, and limited to versions which build time before April 16, 2025.
Dahua Sd — versions Affected products include certain models from the SD3A, SD2A, SD3D, SDT2A, and SD2C series, and limited to versions which build time before April 16, 2025.

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cybersecurity@dahuatech.com

Frequently asked questions

What is CVE-2025-31701?: CVE-2025-31701 is a high-severity vulnerability in Dahua Ipc, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.1/10. Published 2025-07-23.
How severe is CVE-2025-31701?: High severity. CVSS v3 base score is 8.1 out of 10.