Vulnerabilities

TI-2020-13712 CVE-2020-19824 · GHSA-xqhf-h9gx-8rvr

An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and…

LOW 32

An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00242 Published 2023-02-17 No fix listed CWE-362

TI-2021-10687 CVE-2021-30145 · GHSA-mf25-jq7f-vx34

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers…

LOW 39

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02429 Published 2021-05-18 No fix listed CWE-134

TI-2018-04682 CVE-2018-6360 · GHSA-rj86-j8mq-h692

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web…

MEDIUM 43

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whi…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02593 Published 2018-01-28 No fix listed CWE-20

Vulnerabilities

Filters

An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and…

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers…

mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web…