CVE-2022-38851

Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function...

5.5 MediumFix available

Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.34%Down 0.5 points since Sep 16, 2022

What each source reports

NVD Score used 5.5

Record: CVE-2022-38851
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

Record: CVE-2022-38851
Updated: 2026-11-02

EUVDEUVD-2022-41410 No score

Record: EUVD-2022-41410
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xq46-mjg4-6pcj 5.5

Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function...

Record: GHSA-xq46-mjg4-6pcj
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSV 5.5

Record: CVE-2022-38851
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-38851 5.5

Record: DEBIAN-CVE-2022-38851
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-38851 5.5

Record: UBUNTU-CVE-2022-38851
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2024-0062 No score

Updated mplayer packages fix security vulnerabilities

The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c. (CVE-2022-38850) Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38851) Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38855) Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38858) Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38860) The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c. (CVE-2022-38861) Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects mencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1. (CVE-2022-38863) Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1. (CVE-2022-38864) Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38865) Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38866)

Record: MGASA-2024-0062
Updated: 2026-11-02

OSVUSN-5895-1 No score

mplayer vulnerabilities

It was discovered that MPlayer could be made to divide by zero when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service. (CVE-2022-38850, CVE-2022-38860, CVE-2022-38865)

It was discovered that MPlayer could be made to read out of bounds when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service. (CVE-2022-38851)

It was discovered that MPlayer could be made to write out of bounds when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-38855, CVE-2022-38858, CVE-2022-38863, CVE-2022-38864, CVE-2022-38866)

It was discovered that MPlayer did not properly managed memory when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-38861)

Record: USN-5895-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`mplayer` Debian:12	before 2:1.5+svn38408-1	2:1.5+svn38408-1
`mplayer` Debian:13	before 2:1.5+svn38408-1	2:1.5+svn38408-1
`mplayer` Debian:14	before 2:1.5+svn38408-1	2:1.5+svn38408-1
`mplayer` Debian:10 From an advisory covering 10 CVEs	before 2:1.3.0-8+deb10u1, plus listed versions 2:1.3.0-8	2:1.3.0-8+deb10u1
`mplayer` Mageia:9 From an advisory covering 10 CVEs	before 1.5-12.1.mga9	1.5-12.1.mga9
`mplayer` Mageia:9 From an advisory covering 10 CVEs	before 1.5-12.1.mga9.tainted	1.5-12.1.mga9.tainted
`mplayer` Ubuntu:Pro:16.04:LTS	before 2:1.2.1-1ubuntu1.1+esm1, plus listed versions 2:1.2-12:1.2-1build12:1.2.1-12:1.2.1-1ubuntu12:1.2.1-1ubuntu1.1	2:1.2.1-1ubuntu1.1+esm1
`mplayer` Ubuntu:18.04:LTS	before 2:1.3.0-7ubuntu0.2, plus listed versions 2:1.3.0-6build32:1.3.0-6build42:1.3.0-72:1.3.0-7build12:1.3.0-7build2	2:1.3.0-7ubuntu0.2
`mplayer` Ubuntu:20.04:LTS	before 2:1.3.0-8+deb10u1build0.20.04.1, plus listed versions 2:1.3.0-8build42:1.3.0-8build5	2:1.3.0-8+deb10u1build0.20.04.1
`mplayer` Ubuntu:22.04:LTS	before 2:1.4+ds1-3ubuntu0.1, plus listed versions 2:1.4+ds1-12:1.4+ds1-22:1.4+ds1-32:1.4+ds1-3build1	2:1.4+ds1-3ubuntu0.1

Show 4 moreShow less

Affected packages
Package	Affected	Fixed
`mplayer` Ubuntu:Pro:16.04:LTS From an advisory covering 10 CVEs	before 2:1.2.1-1ubuntu1.1+esm1, plus listed versions 2:1.2-12:1.2-1build12:1.2.1-12:1.2.1-1ubuntu12:1.2.1-1ubuntu1.1	2:1.2.1-1ubuntu1.1+esm1
`mplayer` Ubuntu:18.04:LTS From an advisory covering 10 CVEs	before 2:1.3.0-7ubuntu0.2, plus listed versions 2:1.3.0-6build32:1.3.0-6build42:1.3.0-72:1.3.0-7build12:1.3.0-7build2	2:1.3.0-7ubuntu0.2
`mplayer` Ubuntu:20.04:LTS From an advisory covering 10 CVEs	before 2:1.3.0-8+deb10u1build0.20.04.1, plus listed versions 2:1.3.0-8build42:1.3.0-8build5	2:1.3.0-8+deb10u1build0.20.04.1
`mplayer` Ubuntu:22.04:LTS From an advisory covering 10 CVEs	before 2:1.4+ds1-3ubuntu0.1, plus listed versions 2:1.4+ds1-12:1.4+ds1-22:1.4+ds1-32:1.4+ds1-3build1	2:1.4+ds1-3ubuntu0.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-38851 is a medium vulnerability (CVSS 5.5) in Mplayerhq Mencoder, published September 15, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in mplayer 2:1.5+svn38408-1.

References

Show 13 moreShow less