Executive brief
GeoWebPlayer is a software component used with GeoVision video management systems to enable web-based video playback. A security flaw allows an attacker to potentially take control of a user's computer if the user visits a malicious website while the software is running. This could lead to unauthorized access to video feeds, data theft, or a complete system compromise.
Technical details
An improper validation of array index (CWE-129) exists in the WebSocket server of GeoVision GeoWebPlayer version 1.1.1.0. The 'setStream' command accepts an 'index' parameter from a JSON message without performing bounds checking. This index is subsequently used to access arrays and retrieve function pointers for critical section operations. By supplying a specially crafted index value via a malicious webpage (requiring user interaction), an attacker can trigger an out-of-bounds read of a function pointer, leading to arbitrary code execution. The vulnerability is patched in version 1.1.3.0.
Affected products
- GeoVision Inc. GeoWebPlayer V1.1.1.0
Timeline
- 2026-07-01: disclosed: Initial disclosure by Cisco Talos
- 2026-07-02: advisory: NVD publication date
- 2026-07-02: patched: Vendor confirmed version 1.1.3.0 is unaffected