Vendors / Mpv Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Mpv records in CISA KEV No Mpv vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whi…
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.02593 · Published 2018-01-28 · No fix listed CWE-20
Priority LOW 39
A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.02429 · Published 2021-05-18 · No fix listed CWE-134
Priority LOW 32
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVSS 3.1 HIGH 7.0· Local · No auth · User interaction · EPSS 0.00242 · Published 2023-02-17 · No fix listed CWE-362
Open these records in search → All records by CVSS severity
0 3 0 0 0
