Vendors / Clementine-player Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Clementine-player records in CISA KEV No Clementine-player vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 67
An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.
CVSS 3.1 HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.0099 · Published 2024-11-15 · No fix listed CWE-426
Priority LOW 37
Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01292 · Published 2021-12-15 · No fix listed CWE-787
Priority LOW 37
Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01292 · Published 2021-12-15 · No fix listed CWE-476
Priority LOW 26
An issue was discovered in Clementine Music Player 1.3.1.
CVSS 3.0 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00553 · Published 2018-07-19 · No fix listed CWE-476
Open these records in search → All records by CVSS severity
0 3 1 0 0
THREATIST.IORead the docs