Tag
#Out-of-Bound Access
GeoWebPlayer Vulnerability: CVE-2026-57264
A high-severity vulnerability (CVSS 8.3) exists in GeoWebPlayer, an addon for GeoVision software, allowing for out-of-bound access to arrays via a websocket server command. This could lead to arbitrary code execution. Affected versions include V1.1.1.0 on Windows and 64-bit platforms.
Critical Vulnerability in GeoWebPlayer: CVE-2026-13132
A critical vulnerability, CVE-2026-13132, with a CVSS score of 8.3, was discovered in GeoWebPlayer, an addon for various GeoVision software. The vulnerability allows for out-of-bound access to arrays using the `index` value in the `setStream` command, potentially leading to remote code execution, high impact on confidentiality, integrity, and availability. Affected versions include V1.1.1.0, and the vendor has released a patched version V1.1.3.0. Immediate patching is recommended.