Vulnerabilities

TI-2024-34177 CVE-2024-50986 · GHSA-94hw-5cx8-g994

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.

HIGH 67

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0099 Published 2024-11-15 No fix listed CWE-426

TI-2021-17751 CVE-2021-40826 · GHSA-88vg-xw8v-x5c5

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access…

LOW 37

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01292 Published 2021-12-15 No fix listed CWE-476

TI-2021-17752 CVE-2021-40827 · GHSA-9v55-ghc6-wfcw

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a…

LOW 37

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01292 Published 2021-12-15 No fix listed CWE-787

TI-2018-10275 CVE-2018-14332 · GHSA-282p-5qxv-x526

An issue was discovered in Clementine Music Player 1.3.1.

LOW 26

An issue was discovered in Clementine Music Player 1.3.1.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00553 Published 2018-07-19 No fix listed CWE-476

Vulnerabilities

Filters

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access…

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a…

An issue was discovered in Clementine Music Player 1.3.1.