Search CVE reports


Toggle filters

11 – 20 of 73 results


CVE-2022-38853

Medium priority
Needs evaluation

Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

1 affected package

mplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mplayer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2022-38851

Medium priority
Fixed

Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

1 affected package

mplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mplayer Fixed Fixed Fixed
Show less packages

CVE-2022-38850

Medium priority
Fixed

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c.

1 affected package

mplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mplayer Fixed Fixed Fixed
Show less packages

CVE-2022-38600

Medium priority
Needs evaluation

Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.

1 affected package

mplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mplayer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2022-32317

Medium priority
Ignored

The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2.c. This vulnerability can lead to a Denial of Service (DoS) via a crafted file....

1 affected package

mplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
mplayer Not affected Not affected Not affected Not affected
Show less packages

CVE-2019-19489

Medium priority
Needs evaluation

SMPlayer 19.5.0 has a buffer overflow via a long .m3u file.

1 affected package

smplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
smplayer Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2019-12951

Medium priority
Ignored

An issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a critical heap-based buffer overflow.

1 affected package

smplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
smplayer Ignored
Show less packages

CVE-2018-7751

Medium priority

Some fixes available 1 of 40

The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file.

7 affected packages

gst-libav1.0, mplayer, mythtv, oxide-qt, libav...

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
gst-libav1.0 Needs evaluation Needs evaluation Needs evaluation Needs evaluation
mplayer Not affected Not affected Not affected Not affected
mythtv Needs evaluation Needs evaluation Needs evaluation Needs evaluation
oxide-qt Not in release Not in release Not in release Not in release
libav Not in release Not in release Not in release Not in release
ffmpeg Not affected Not affected Not affected Fixed
vlc Not affected Not affected Not affected Not affected
Show all 7 packages Show less packages

CVE-2018-18765

Medium priority
Not affected

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in mg_mqtt_next_subscribe_topic. A specially crafted MQTT SUBSCRIBE...

1 affected package

smplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
smplayer Not affected Not affected
Show less packages

CVE-2018-18764

Medium priority
Needs evaluation

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in a parse_mqtt getu16 call. A specially crafted MQTT SUBSCRIBE...

1 affected package

smplayer

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
smplayer Not affected Not affected Not affected Needs evaluation
Show less packages