PatchTheCVEmplayer vulnerabilities and fixes
Recent CVEs affecting mplayer, with upgrade or downgrade steps. 14 tracked.
mplayer has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-15. Highest priority: CVE-2022-38862 (score 40/100).
- CVE-2022-38866 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/avi
- CVE-2022-38865 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet o
- CVE-2022-38864 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of lib
- CVE-2022-38863 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux
- CVE-2022-38862 HIGH 7.8 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639
- CVE-2022-38861 MEDIUM 5.5 DOWNGRADE MITIGATE The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image()
- CVE-2022-38860 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpde
- CVE-2022-38858 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmp
- CVE-2022-38856 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmp
- CVE-2022-38855 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer
- CVE-2022-38853 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of
- CVE-2022-38851 MEDIUM 5.5 DOWNGRADE DOWNGRADE Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of m
- CVE-2022-38600 MEDIUM 5.5 DOWNGRADE Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
- CVE-2022-32317 MEDIUM 5.5 DOWNGRADE The MPlayer Project v1.5 was discovered to contain a heap use-after-free resulting in a double free in the pre
FAQ
How do I fix mplayer vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mplayer being exploited right now?
None of the tracked mplayer CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mplayer CVE should I patch first?
CVE-2022-38862 currently ranks highest (40/100): Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639.