CVE-2026-57267

Name of the Vulnerable Software and Affected Versions GeoWebPlayer (affected versions not specified)

Description GeoWebPlayer, also known as Web Plugin in GV-VMS documentation and WS Player for VMS-Cloud, is an addon for GeoVision software that establishes a websocket server to enhance web-interface capabilities. The websocket server accepts commands from localhost, several of which utilize an index value to access arrays for critical sections or function calls. Because the index value is not validated for a correct range, it can be used to perform out-of-bounds reads on multiple arrays, specifically within the snapshot command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.