Web Plugin in GeoVision Software Exposes Out-of-Bounds Access Risk
CVE-2026-57269

8.3HIGH

Key Information:

Vendor

Geovision Inc.

Status
Geowebplayer
Vendor
CVE Published:
2 July 2026

What is CVE-2026-57269?

GeoWebPlayer, a component of various GeoVision software solutions, is susceptible to an out-of-bounds access vulnerability. This arises due to the lack of validation for an 'index' value that allows commands from localhost to manipulate critical sections of memory. When the index is not properly checked, it can lead to unauthorized access and possible exploitation of sensitive functionalities within the system. Users are advised to take immediate steps to mitigate potential risks associated with this vulnerability.

Affected Version(s)

GeoWebPlayer Windows V1.1.1.0

GeoWebPlayer Windows V1.1.3.0

References

https://www.geovision.com.tw/cyber_security.php
vendor-advisory
https://talosintelligence.com/vulnerability_reports/TALOS...
third-party-advisory

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Philippe Laulheret of Cisco Talos
Kelly Patterson of Cisco Talos
Robert Sherwin of Cisco Talos
.