Mplayer (Mplayerhq) - vulnerabilities (CVEs)
20 CVEs, 0 in the last 30 days, 96 known versions, newest CVE from 2025-07-31. Vendor: Mplayerhq.
CVEs of Mplayer
- CVE-2011-10008 - CVSS 8.6 (high), 2025-07-31: A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long…
- CVE-2022-38600 - CVSS 5.5 (medium), 2022-09-15: Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
- CVE-2022-38851 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects…
- CVE-2022-38856 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer…
- CVE-2022-38861 - CVSS 5.5 (medium), 2022-09-15: The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
- CVE-2022-38864 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder…
- CVE-2022-38855 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer…
- CVE-2022-38860 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This…
- CVE-2022-38863 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer.…
- CVE-2022-38866 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer…
- CVE-2022-38858 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer…
- CVE-2022-38862 - CVSS 7.8 (high), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639. This affects mplayer SVN-r38374-13.0.1 and…
- CVE-2022-38865 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects mplyer…
- CVE-2022-38853 - CVSS 5.5 (medium), 2022-09-15: Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c. This affects mplayer…
- CVE-2022-32317 - CVSS 5.5 (medium), 2022-07-14: The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the preinit function at libvo/vo_v4l2.c. This…
- CVE-2011-2162 - CVSS 10 (critical), 2011-05-20: Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1;…
- CVE-2011-2160 - CVSS 9.3 (critical), 2011-05-20: The VC-1 decoding functionality in FFmpeg before 0.5.4, as used in MPlayer and other products, does not properly restrict read operations, which allows remote…
- CVE-2010-3908 - CVSS 6.8 (medium), 2011-05-20: FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (memory corruption and application crash) or…
- CVE-2011-0722 - CVSS 6.8 (medium), 2011-05-20: FFmpeg before 0.5.4, as used in MPlayer and other products, allows remote attackers to cause a denial of service (heap memory corruption and application…
- CVE-2010-3429 - CVSS 6.8 (medium), 2010-09-30: flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allows remote attackers to execute arbitrary code via a crafted…
