Executive brief
GeoWebPlayer is a software component used by GeoVision video management systems to enable web-based video playback and camera controls. A security flaw allows an attacker to trick a user into visiting a malicious website, which can then send unauthorized commands to the GeoWebPlayer software on the user's computer. This could allow the attacker to take control of the system, potentially leading to data theft or a complete system compromise.
Technical details
Multiple out-of-bounds (OOB) vulnerabilities exist in the WebSocket server of GeoVision GeoWebPlayer (specifically version 1.1.1.0). The software fails to validate the 'index' field in various JSON commands (including connectInfo, setStream, setPIP, audio, and 2wayAudio) before using it to access internal arrays. An attacker can provide an out-of-range index to trigger OOB reads or writes. In several instances, this leads to the execution of function pointers read from memory outside the intended array bounds, enabling arbitrary code execution. The attack requires the victim to visit a malicious site (User Interaction) and relies on the WebSocket server accepting commands from the browser context via localhost. Version 1.1.3.0 is reported as unaffected.
Affected products
- GeoVision Inc. GeoWebPlayer V1.1.1.0
Timeline
- 2026-07-01: advisory: Talos vulnerability report published
- 2026-07-02: disclosed: CVE published to NVD