CVE-2026-57276

Name of the Vulnerable Software and Affected Versions GeoWebPlayer (affected versions not specified)

Description The GeoWebPlayer addon, which creates a websocket server to expand web-interface capabilities for GeoVision software, contains a memory corruption issue. The handle connection info function fails to enforce length limits when copying attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops. This occurs specifically when processing the connectionInfo command, particularly within the password field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.