CVE-2022-38861: Medium severity Mplayerhq Mplayer vulnerability
The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function freempimage() of libmpcodecs/mpimage.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/mplayerto a version that resolves this vulnerability.Fixed in 2:1.5+svn38408-1Fixed in 2:1.5+svn38674-2Fixed in 2:1.5+svn38681-2 - Upgrade
Upgrade
debian/mplayerto a version that resolves this vulnerability.Fixed in 2:1.5+svn38408-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38861?
CVE-2022-38861 has been classified as a high severity vulnerability due to its potential for memory corruption.
How do I fix CVE-2022-38861?
To fix CVE-2022-38861, upgrade to a patched version of MPlayer that addresses the memory corruption issue.
Which versions of MPlayer are affected by CVE-2022-38861?
CVE-2022-38861 specifically affects MPlayer version svn-r38374-13.0.1.
What impact does CVE-2022-38861 have on affected systems?
Exploitation of CVE-2022-38861 can lead to possible application crashes or arbitrary code execution.
Is CVE-2022-38861 relevant for Debian users?
Yes, Debian GNU/Linux 10.0 is also vulnerable to CVE-2022-38861.