CVE-2026-57265
Deferred Deferred - Pending Action

Audio Command Index Out-of-Bounds in GeoWebPlayer

Publication date: 2026-07-02

Last updated on: 2026-07-02

Assigner: 0df08a0e-a200-4957-9bb0-084f562506f9

Description
GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be installed with various GeoVision software (GV-VMS, GV-Cloud, ...). It creates a websocket server that expands the capabilities of the various web-interfaces provided by the GeoVision software and may be necessary for them to function properly. The Websocket server can accept various commands coming from localhost. Many of the commands will take an `index` value that is then used to access various arrays to enter critical sections, perform various actions via function calls, etc. However the `index` value is usually not checked for valid range, and as such it can be used to access multiple arrays out-of-bound. #### audio command index-out-of-bound

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-02
Last Modified
2026-07-02
Generated
2026-07-22
AI Q&A
2026-07-02
EPSS Evaluated
2026-07-21
NVD
CVE-2026-57265
EUVD
EUVD-2026-41227

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
geovision geowebplayer *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-129 The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in GeoWebPlayer, an addon for GeoVision software that creates a websocket server to enhance web-interface capabilities. The server accepts commands from localhost, many of which use an 'index' value to access arrays for critical operations. However, the 'index' is not properly checked for valid range, allowing out-of-bound access to multiple arrays.

Detection Guidance

This vulnerability involves the GeoWebPlayer websocket server accepting commands from localhost with an unchecked index value leading to out-of-bounds array access. Detection would involve monitoring websocket traffic to the GeoWebPlayer service, especially messages containing commands with index parameters.

Since the vulnerability is triggered by specially crafted websocket messages, one approach is to capture and analyze websocket frames targeting the GeoWebPlayer server for suspicious or out-of-range index values.

Specific commands to detect this vulnerability are not provided in the available resources. However, network administrators can use tools like Wireshark or tcpdump to capture websocket traffic on the relevant ports and filter for GeoWebPlayer websocket connections.

On the system itself, checking for the presence and version of GeoWebPlayer (e.g., version 1.1.1.0 as mentioned in related vulnerabilities) can help identify vulnerable installations.

Impact Analysis

Because the vulnerability allows out-of-bound array access via the 'index' parameter, it can lead to critical security issues such as unauthorized access, data corruption, or execution of arbitrary code. The CVSS score of 8.3 indicates a high severity with potential impacts on confidentiality, integrity, and availability.

Compliance Impact

The provided information does not explicitly address how CVE-2026-57265 affects compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The primary mitigation step is to apply the vendor-released patch that addresses this vulnerability. According to the resources, GeoVision released a patch on April 28, 2026, which should be installed promptly.

Until the patch can be applied, restricting access to the GeoWebPlayer websocket server, especially limiting connections to trusted localhost sources and blocking untrusted network access, can reduce the risk of exploitation.

Monitoring and logging websocket activity for unusual commands or index values may help detect exploitation attempts.

Following GeoVision's cybersecurity advisories and updating firmware or software regularly as per their vulnerability management process is recommended.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57265. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart