CVE-2022-38866

CVE-2022-38866 affects The MPlayer Project, including mplayer and mencoder (SVN-r38374-13.0.1). The root cause is a vulnerability in read_avi_header() in libmpdemux/aviheader.c that can cause a buffer overflow. The related connected advisories/refs also cover additional CVEs for the same project ...

CVE-2022-38865

CVE-2022-38865 affects The MPlayer Project, where divide-by-zero occurs in demux_avi_read_packet (libmpdemux/demux_avi.c) and impacts mplayer/mencoder SVN-r38374-13.0.1. Public advisories (Debian DLA-3255-1, Gentoo GLSA-202405-05, Mageia MGASA-2024-0062, Ubuntu USN-5895-1, OpenVAS entries) link t...

CVE-2022-38864

CVE-2022-38864 affects The MPlayer Project: the buffer overflow in mp_unescape03() in libmpdemux/mpeg_hdr.c impacts mplayer and mencoder SVN-r38374-13.0.1. The Connected documents also enumerate related issues (CVE-2022-38850, -38851, -38853, -38855, -38858, -38860, -38861, -38863, -38864, -38865...

CVE-2022-38863

MPlayer and mencoder are affected by CVE-2022-38863 (Buffer Overflow in libmpdemux/mpeg_hdr.c, mp_getbits). The issue affects MPlayer/MEncoder builds around SVN-r38374-13.0.1. Public advisories (Debian DLA-3255-1, Gentoo GLSA-202405-05, Mageia MGASA-2024-0062, Ubuntu USN-5895-1, OpenVAS entries) ...

CVE-2022-38860

CVE-2022-38860 affects The MPlayer Project (mplayer and mencoder) with a Divide By Zero in demux_open_avi() in libmpdemux/demux_avi.c. Affected artifacts include mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. The vulnerability can be triggered by processing certain malformed AVI demux ...

CVE-2022-38858

CVE-2022-38858 affects The MPlayer Project: buffer overflow in mov_build_index() inside libmpdemux/demux_mov.c, impacting mplayer and mencoder built from SVN-r38374-13.0.1. Connected sources corroborate multiple MPlayer vulnerabilities around the same codebase (buffer overflows, divide-by-zero, o...

CVE-2022-38861

CVE-2022-38861 affects MPlayer and related tools (e.g., mencoder) built from SVN-r38374-13.0.1. The root cause is a memory corruption vulnerability in the function free_mp_image() in libmpcodecs/mp_image.c, which is cited along with other CVEs in multiple advisories. Impacts described across sour...

CVE-2022-38855

Summary of findings (CVE-2022-38855 and related): The MPlayer Project’s mplayer and mencoder (SVN-r38374-13.0.1) are affected by multiple vulnerabilities across demux and codec code paths. Concrete issues in the Connected documents include: buffer overflow via gen_sh_video() in mplayer/libmpdemux...

CVE-2022-38851

CVE-2022-38851 affects The MPlayer Project: mplayer and mencoder (SVN-r38374-13.0.1). The root cause is an out-of-bounds read in read_meta_record() within mplayer/libmpdemux/asfheader.c. Impact per sources is a crash/denial of service when processing certain malformed media files, with no broader...

CVE-2022-38850

CVE-2022-38850, 38851, 38855, 38858, 38860, 38861, 38863, 38864, 38865, 38866 affect MPlayer and mencoder (SVN-r38374-13.0.1). The issues span Divide By Zero in llibmpcodecs/vf_scale.c (CVE-38850) and other problems including Out-of-bounds Read (CVE-38851), Buffer Overflow (CVE-38855, 38858, 3886...

PT-2022-24599 · Mplayer +3 · Mplayer +3

Name of the Vulnerable Software and Affected Versions: mplayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Divide By Zero vulnerability via the demux open avi function of libmpdemux/demux avi.c, which affects mencoder. Recommendations: For...

PT-2022-24598 · Unknown +4 · Libmpdemux +4

Name of the Vulnerable Software and Affected Versions: mplayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow via the mov build index function of libmpdemux/demux mov.c. This is a general information about the problem, and no...

PT-2022-7415

Name of the Vulnerable Software and Affected Versions MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description The issue is related to a Divide By Zero vulnerability via the demux avi read packet function in libmpdemux/demux avi.c. This vulnerability may allow an attacke...

PT-2022-7417

Name of the Vulnerable Software and Affected Versions MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description The issue is related to a Buffer Overflow via the mp getbits function of libmpdemux/mpeg hdr.c, which affects mencoder and mplayer. This can lead to a denial of...

PT-2022-7419

Name of the Vulnerable Software and Affected Versions MPlayer versions SVN-r38374-13.0.1 Description The issue is related to memory corruption via the function free mp image of libmpcodecs/mp image.c and also involves the mov build index function, which is associated with a buffer overflow. This...

PT-2022-7412

Name of the Vulnerable Software and Affected Versions MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description The issue is related to an out-of-bounds read via the read meta record function in mplayer/libmpdemux/asfheader.c. This can potentially allow an attacker to cau...

PT-2022-7416

Name of the Vulnerable Software and Affected Versions mencoder versions SVN-r38374-13.0.1 mplayer versions SVN-r38374-13.0.1 Description The issue is related to a Buffer Overflow via the function mp unescape03 of libmpdemux/mpeg hdr.c. This can potentially allow an attacker to cause a denial of...

PT-2022-7413

Name of the Vulnerable Software and Affected Versions Mplayer versions SVN-r38374-13.0.1 Description The issue is related to a memory leak in the Mplayer media player, specifically in the files vf.c and vf vo.c, due to the lack of memory release after its effective term of service. Exploitation o...

PT-2022-7420

Name of the Vulnerable Software and Affected Versions MPlayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description The issue is related to a Buffer Overflow via the gen sh video function in mplayer/libmpdemux/demux mov.c. This can potentially allow an attacker to cause a...

PT-2022-24600 · Mplayer +2 · Mplayer +2

Name of the Vulnerable Software and Affected Versions: mplayer versions SVN-r38374-13.0.1 mencoder versions SVN-r38374-13.0.1 Description: The issue is related to a Buffer Overflow vulnerability via the play function of libaf/af.c:639. Recommendations: For mplayer version SVN-r38374-13.0.1,...