GALAYOU vulnerabilities
We track 2 vulnerabilities in GALAYOU products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 15, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest GALAYOU vulnerabilities
- 8.8 High severity
Y4: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in GALAYOU Y4 1.0.0. Impacted is an unknown function of the component Web Server. This manipulation causes buffer overflow. The attack is only possible within the local network. The exploit has been publicly disclosed and may be
- 7.1 High severity
G2: Missing Authentication for Critical Functionality
GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated credentials. However these credentials are not required to access the stream. Changing these values does not change camera's behavior. The ven