GeoWebPlayer, an addon component for GeoVision software, contains an improper validation of array index vulnerability (CWE-129) in version 1.1.1.0. Specifically, the 'pause' command can trigger an index-out-of-bound error due to insufficient bounds checking. This flaw could potentially be exploited to cause memory corruption or application instability. The vulnerability has a CVSS 3.1 base score of 8.3, indicating high severity with network attack vector, high complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor patch or official remediation is currently available.

Successful exploitation of this vulnerability could lead to memory corruption or application crashes, potentially impacting confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the significant potential impact if exploited remotely, although user interaction is required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure of the GeoWebPlayer service to untrusted networks and monitor for unusual activity related to the 'pause' command. No official mitigation or workaround has been provided by the vendor at this time.