Description
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly.

The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits.




#### Buffer Overflow in key field
Published: 2026-07-02
Score: 8.3 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The GeoWebPlayer websocket server processes the connectionInfo command by copying JSON data into fixed-size buffers without enforcing length limits. This flaw presents as a stack-based buffer overflow that an attacker can trigger by sending a crafted JSON string. If the overflow is successfully invoked, it can corrupt critical control information on the stack and may lead to arbitrary code execution on the host system.

Affected Systems

GeoVision GeoWebPlayer version 1.1.1.0 in both 64‑bit and Windows builds is affected. The component is typically installed as an addon within GeoVision software suites such as GV‑VMS and GV‑Cloud to provide websocket‑based camera connectivity. The vendor has issued a patched release, GeoWebPlayer V1.1.3.0, which resolves the overflow.

Risk and Exploitability

The CVSS score of 8.3 categorizes the vulnerability as high severity. The EPSS score of less than 1% indicates a very low but non‑zero probability of exploitation in the wild, and the flaw is not listed in CISA’s KEV catalog. The likely can send messages to the websocket server on the host can craft a malicious connectionInfo command, potentially enabling attacker‑controlled code execution.

Generated by OpenCVE AI on July 21, 2026 at 12:28 UTC.

Remediation

Vendor Solution

The vulnerability has been patched with GeoWebPlayer V1.1.3.0

OpenCVE Recommended Actions

  • Update GeoWebPlayer to version 1.1.3.0, the vendor’s released fix.
  • If the websocket server is not required, disable it to eliminate the attack surface.
  • Implement local firewall rules or network segmentation to restrict which processes or users can send commands to the websocket server.

Generated by OpenCVE AI on July 21, 2026 at 12:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 02 Jul 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 02 Jul 2026 03:30:00 +0000

Type Values Removed Values Added
Description GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. One of them, `connectionInfo` is meant to provide the necessary details to connect to a camera. The handler associated with this command that we call`handle_connection_info` contains multiple instances of string copy that can overflow. The function `handle_connect_info` copies attacker-controlled JSON strings into fixed-size buffers using manual byte-by-byte loops that do not enforce length limits. #### Buffer Overflow in key field
Title GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerability
First Time appeared Geovision Inc.
Geovision Inc. geowebplayer
Weaknesses CWE-120
CPEs cpe:2.3:a:geovision_inc.:geowebplayer:v1.1.1.0:*:64_bit:*:*:*:*:*
cpe:2.3:a:geovision_inc.:geowebplayer:v1.1.1.0:*:windows:*:*:*:*:*
cpe:2.3:a:geovision_inc.:geowebplayer:v1.1.3.0:*:64_bit:*:*:*:*:*
cpe:2.3:a:geovision_inc.:geowebplayer:v1.1.3.0:*:windows:*:*:*:*:*
Vendors & Products Geovision Inc.
Geovision Inc. geowebplayer
References
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H'}

Subscriptions

Geovision Inc. Geowebplayer
cve-icon MITRE

Status: PUBLISHED

Assigner: GV

Published:

Updated: 2026-07-02T12:34:29.480Z

Reserved: 2026-06-24T05:48:05.704Z

Link: CVE-2026-57277

cve-icon Vulnrichment

Updated: 2026-07-02T12:34:26.072Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-21T12:30:03Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')