The ALGO 8180 IP Audio Alerter suffers a heap‑based buffer overflow in its InformaCast feature. The flaw arises from a lack of length validation when copying user‑supplied data into a heap buffer, allowing any remote attacker to reliably trigger a memory corruption that results in execution of arbitrary code in the device’s context. Authentication is not required; any network‑connected device can be targeted by a crafted payload.

The vulnerability affects devices running ALGO 8180 IP Audio Alerter firmware version 5.5 as identified by the product CPE. No other firmware versions are listed as affected in the available data.

The CVSS base score of 9.8 classifies the flaw as Critical. The EPSS score of less than 1 % indicates that active exploitation is currently unlikely, but the lack of an authentication requirement means that any network‑reachable device is a potential target. The vulnerability is not yet listed in the CISA KEV catalog.