Every CVE Search/ Get API key

OSV-2026-728

Stack-buffer-overflow in autoload_external_files

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512622269

Crash type: Stack-buffer-overflow READ 4
Crash state:
autoload_external_files
load_external_opts_thread
worker_thread

What each source reports

OSV No score

Stack-buffer-overflow in autoload_external_files

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=512622269

Crash type: Stack-buffer-overflow READ 4
Crash state:
autoload_external_files
load_external_opts_thread
worker_thread
Record
OSV-2026-728
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
mpv
OSS-Fuzz
Listed versions, plus commit ranges
v0.39.0v0.40.0v0.41.0
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2026-728 is a vulnerability with no CVSS score yet in mpv, published May 14, 2026. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open