CVE-2016-4352

CVE-2016-4352 involves an integer overflow in the demuxer function libmpdemux/demux_gif.c in MPlayer. The vulnerability allows a remote attacker to cause a crash by providing a GIF with large width/height dimensions. Available connected documents confirm the same description across multiple sourc...

CVE-2016-5115

CVE-2016-5115 affects libavcodec/libavformat (used by MPlayer): the avcodec_decode_audio4 function can be triggered by a crafted MP3 file to cause an out-of-bounds read, resulting in a denial of service. The connected documents confirm the component, vulnerability mechanism, and impact; no explic...