PatchTheCVEgom player vulnerabilities and fixes
Recent CVEs affecting gom player, with upgrade or downgrade steps. 2 tracked.
Also searched as: gomplayer.
gom player has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-12-15. Highest priority: CVE-2023-53874 (score 55/100).
- CVE-2023-53875 HIGH 8.8 DOWNGRADE GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that
- CVE-2023-53874 CRITICAL 9.8 DOWNGRADE GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that
FAQ
How do I fix gom player vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gom player being exploited right now?
None of the tracked gom player CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gom player CVE should I patch first?
CVE-2023-53874 currently ranks highest (55/100): GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that .