# CVE-2026-57276: GeoVision GeoWebPlayer buffer overflow in password field of connectionInfo handler

Source: https://junglewise.ai/threats/cve-2026-57276-geovision-geowebplayer-buffer-overflow-in-password-field-of  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-02. Updated: 2026-07-02  
License: CC BY 4.0 with a link back

CVE-2026-57276 · Severity: high · CVSS 8.3 · Published 2026-07-02

GeoWebPlayer is a browser-based plugin used to view video feeds from GeoVision surveillance systems. A security flaw in how the plugin handles connection requests could allow an attacker to take control of a user's computer if they visit a malicious website. This could lead to unauthorized access to video feeds, data theft, or a complete system compromise.

Technologies: [Geovision GeoWebPlayer](https://junglewise.ai/threats/technologies/geowebplayer). Vendors: [Geovision](https://junglewise.ai/threats/vendors/geovision).

## Quick answers

**Is CVE-2026-57276 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-57276 being exploited in the wild.

**How severe is CVE-2026-57276?** High severity, with a CVSS score of 8.3, published 2 July 2026.

**Which products and versions are affected?** Geovision GeoWebPlayer 1.1.1.0.

**Is there a fix for CVE-2026-57276?** A patch was published on 2026-04-28: Vendor patch release (v1.1.3.0) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-57276 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-57276?** Check whether you run Geovision GeoWebPlayer at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow exists in GeoVision GeoWebPlayer version 1.1.1.0 within the WebSocket server component. The vulnerability is located in the `handle_connection_info` function, which processes the `connectionInfo` command. When a 'key' variable is provided in the JSON payload, the application copies the 'password' field into a fixed-size 128-byte buffer (`password_enc`) using a manual byte-by-byte loop without bounds checking. An attacker can exploit this by hosting a malicious webpage that sends a specially crafted WebSocket message to the local GeoWebPlayer service, leading to arbitrary code execution. The vendor has released version 1.1.3.0 to address this issue.

## Affected products

- GeoVision Inc. GeoWebPlayer 1.1.1.0

## Timeline

- 2026-03-25: other: Initial vendor contact
- 2026-04-21: disclosed: Vendor disclosure
- 2026-04-28: patched: Vendor patch release (v1.1.3.0)
- 2026-07-01: advisory: Public release by Cisco Talos
- 2026-07-02: advisory: NVD publication

## References

- [https://talosintelligence.com/vulnerability_reports/TALOS-2026-2375](https://talosintelligence.com/vulnerability_reports/TALOS-2026-2375)
- [https://www.geovision.com.tw/cyber_security.php](https://www.geovision.com.tw/cyber_security.php)

## Related threats

- [GeoVision GeoWebPlayer buffer overflow in ip field](https://junglewise.ai/threats/cve-2026-57278-geovision-geowebplayer-buffer-overflow-in-ip-field)
- [GeoVision GeoWebPlayer stack buffer overflow in connectionInfo handler](https://junglewise.ai/threats/cve-2026-57277-geovision-geowebplayer-stack-buffer-overflow-in-connectioninfo)
- [GeoVision GeoWebPlayer stack buffer overflow in connectionInfo handler](https://junglewise.ai/threats/cve-2026-57275-geovision-geowebplayer-stack-buffer-overflow-in-connectioninfo)
- [GeoVision GeoWebPlayer stack buffer overflow in connectionInfo password field](https://junglewise.ai/threats/cve-2026-57274-geovision-geowebplayer-stack-buffer-overflow-in-connectioninfo)
- [GeoVision GeoWebPlayer buffer overflows in connectionInfo handler](https://junglewise.ai/threats/cve-2026-57273-geovision-geowebplayer-buffer-overflows-in-connectioninfo-handler)