PatchTheCVEmencoder vulnerabilities and fixes
Recent CVEs affecting mencoder, with upgrade or downgrade steps. 12 tracked.
mencoder has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-15. Highest priority: CVE-2022-38862 (score 40/100).
- CVE-2022-38866 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/avi
- CVE-2022-38865 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet o
- CVE-2022-38864 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of lib
- CVE-2022-38863 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux
- CVE-2022-38862 HIGH 7.8 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639
- CVE-2022-38860 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpde
- CVE-2022-38858 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmp
- CVE-2022-38856 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmp
- CVE-2022-38855 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer
- CVE-2022-38853 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of
- CVE-2022-38851 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of m
- CVE-2022-38850 MEDIUM 5.5 DOWNGRADE MITIGATE The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of l
FAQ
How do I fix mencoder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mencoder being exploited right now?
None of the tracked mencoder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mencoder CVE should I patch first?
CVE-2022-38862 currently ranks highest (40/100): Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639.