CVE-2022-38850

CVE-2022-38850, 38851, 38855, 38858, 38860, 38861, 38863, 38864, 38865, 38866 affect MPlayer and mencoder (SVN-r38374-13.0.1). The issues span Divide By Zero in llibmpcodecs/vf_scale.c (CVE-38850) and other problems including Out-of-bounds Read (CVE-38851), Buffer Overflow (CVE-38855, 38858, 3886...

CVE-2022-38864

CVE-2022-38864 affects The MPlayer Project: the buffer overflow in mp_unescape03() in libmpdemux/mpeg_hdr.c impacts mplayer and mencoder SVN-r38374-13.0.1. The Connected documents also enumerate related issues (CVE-2022-38850, -38851, -38853, -38855, -38858, -38860, -38861, -38863, -38864, -38865...

CVE-2022-38866

CVE-2022-38866 affects The MPlayer Project, including mplayer and mencoder (SVN-r38374-13.0.1). The root cause is a vulnerability in read_avi_header() in libmpdemux/aviheader.c that can cause a buffer overflow. The related connected advisories/refs also cover additional CVEs for the same project ...

CVE-2022-38863

MPlayer and mencoder are affected by CVE-2022-38863 (Buffer Overflow in libmpdemux/mpeg_hdr.c, mp_getbits). The issue affects MPlayer/MEncoder builds around SVN-r38374-13.0.1. Public advisories (Debian DLA-3255-1, Gentoo GLSA-202405-05, Mageia MGASA-2024-0062, Ubuntu USN-5895-1, OpenVAS entries) ...

CVE-2022-38851

CVE-2022-38851 affects The MPlayer Project: mplayer and mencoder (SVN-r38374-13.0.1). The root cause is an out-of-bounds read in read_meta_record() within mplayer/libmpdemux/asfheader.c. Impact per sources is a crash/denial of service when processing certain malformed media files, with no broader...

CVE-2022-38855

Summary of findings (CVE-2022-38855 and related): The MPlayer Project’s mplayer and mencoder (SVN-r38374-13.0.1) are affected by multiple vulnerabilities across demux and codec code paths. Concrete issues in the Connected documents include: buffer overflow via gen_sh_video() in mplayer/libmpdemux...

CVE-2022-38865

CVE-2022-38865 affects The MPlayer Project, where divide-by-zero occurs in demux_avi_read_packet (libmpdemux/demux_avi.c) and impacts mplayer/mencoder SVN-r38374-13.0.1. Public advisories (Debian DLA-3255-1, Gentoo GLSA-202405-05, Mageia MGASA-2024-0062, Ubuntu USN-5895-1, OpenVAS entries) link t...

CVE-2022-38860

CVE-2022-38860 affects The MPlayer Project (mplayer and mencoder) with a Divide By Zero in demux_open_avi() in libmpdemux/demux_avi.c. Affected artifacts include mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. The vulnerability can be triggered by processing certain malformed AVI demux ...

CVE-2022-38858

CVE-2022-38858 affects The MPlayer Project: buffer overflow in mov_build_index() inside libmpdemux/demux_mov.c, impacting mplayer and mencoder built from SVN-r38374-13.0.1. Connected sources corroborate multiple MPlayer vulnerabilities around the same codebase (buffer overflows, divide-by-zero, o...

CVE-2022-38856

CVE-2022-38856 affects The MPlayer Project: mplayer and mencoder (SVN-r38374-13.0.1) with a Buffer Overflow in libmpdemux/demux_mov.c:mov_build_index(). Root cause is a buffer overflow in that function; CVSS indicates LOCAL attack vector, with user interaction required and availability impact. No...

CVE-2022-38853

CVE-2022-38853 affects The MPlayer Project: buffer overflow in asf_init_audio_stream() within libmpdemux/asfheader.c. Impacted components are mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. Root cause is a vulnerability in handling ASF audio stream initialization. Public details across ...

CVE-2022-38862

CVE-2022-38862 affects The MPlayer Project products. Vulnerable component: buffer overflow in play() of libaf/af.c:639, impacting mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. CVSSv3.1 base score 7.8 (HIGH). Connected advisories indicate multiple related issues in MPlayer; remediation...