tocsin

Alpine/mpv: high 7.8

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.

Action: Upgrade mpv to 0.33.0-r1 or later.

Affected

introducedfixedlast affected
00.33.0-r1-

Fixed versions

0.33.0-r1

Sources

published · modified · JSON