{"id":"CVE-2022-38855","aliases":["DEBIAN-CVE-2022-38855","DLA-3255-1","EUVD-2022-41414","GHSA-m7v6-38x6-p6ph","MGASA-2024-0062","UBUNTU-CVE-2022-38855","USN-5895-1"],"status":"published","title":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video ...","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0037,"percentile":0.31119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2022-09-15T00:00:00Z","modified":"2026-11-03T08:02:25Z","fixes":[{"ecosystem":"Debian:12","package":"mplayer","fixed_in":["2:1.5+svn38408-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mplayer","fixed_in":["2:1.5+svn38408-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mplayer","fixed_in":["2:1.5+svn38408-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mplayer","fixed_in":["2:1.2.1-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"mplayer","fixed_in":["2:1.3.0-7ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"mplayer","fixed_in":["2:1.3.0-8+deb10u1build0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"mplayer","fixed_in":["2:1.4+ds1-3ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5+svn38408-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5+svn38408-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.5+svn38408-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.3.0-8+deb10u1"}]}],"versions":["2:1.3.0-8"],"bundled":10},{"source":"osv","ecosystem":"Mageia:9","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-12.1.mga9"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:9","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5-12.1.mga9.tainted"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.1-1ubuntu1.1+esm1"}]}],"versions":["2:1.2-1","2:1.2-1build1","2:1.2.1-1","2:1.2.1-1ubuntu1","2:1.2.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.3.0-7ubuntu0.2"}]}],"versions":["2:1.3.0-6build3","2:1.3.0-6build4","2:1.3.0-7","2:1.3.0-7build1","2:1.3.0-7build2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.3.0-8+deb10u1build0.20.04.1"}]}],"versions":["2:1.3.0-8build4","2:1.3.0-8build5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.4+ds1-3ubuntu0.1"}]}],"versions":["2:1.4+ds1-1","2:1.4+ds1-2","2:1.4+ds1-3","2:1.4+ds1-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.1-1ubuntu1.1+esm1"}]}],"versions":["2:1.2-1","2:1.2-1build1","2:1.2.1-1","2:1.2.1-1ubuntu1","2:1.2.1-1ubuntu1.1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.3.0-7ubuntu0.2"}]}],"versions":["2:1.3.0-6build3","2:1.3.0-6build4","2:1.3.0-7","2:1.3.0-7build1","2:1.3.0-7build2"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.3.0-8+deb10u1build0.20.04.1"}]}],"versions":["2:1.3.0-8build4","2:1.3.0-8build5"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"mplayer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.4+ds1-3ubuntu0.1"}]}],"versions":["2:1.4+ds1-1","2:1.4+ds1-2","2:1.4+ds1-3","2:1.4+ds1-3build1"],"bundled":10}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"mplayerhq","product":"mencoder"},{"vendor":"mplayerhq","product":"mplayer"}],"references":[{"url":"https://trac.mplayerhq.hu/ticket/2392","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00042.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38855"},{"url":"https://github.com/advisories/GHSA-m7v6-38x6-p6ph"},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-38855","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0062.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38855","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5895-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38855","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38850","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38858","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38860","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38861","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38863","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38864","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38865","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38866","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-38855","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-15T00:00:00Z","modified":"2024-08-03T11:02:14.672Z","updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-41414","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-15T00:00:00Z","modified":"2024-08-03T11:02:14Z","updated_at":"2026-11-03T03:25:21.94292Z"}],"ghsa":[{"id":"GHSA-m7v6-38x6-p6ph","title":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video ...","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-16T00:00:38Z","modified":"2023-01-31T05:07:14Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:49:10.75849Z"}],"nvd":[{"id":"CVE-2022-38855","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-15T15:15:10Z","modified":"2026-06-17T04:57:14.77Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:27.631109Z"}],"osv":[{"id":"CVE-2022-38855","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-15T15:15:10Z","modified":"2026-04-16T04:41:34.686088863Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-38855","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-15T15:15:10Z","modified":"2026-11-03T08:02:25.149346575Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"UBUNTU-CVE-2022-38855","description":"Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.","status":"published","published":"2022-09-15T15:15:00Z","modified":"2026-02-04T04:25:30.776667Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"DLA-3255-1","title":"mplayer - security update","status":"published","published":"2022-12-31T00:00:00Z","modified":"2026-03-09T01:19:52.463885Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2024-0062","title":"Updated mplayer packages fix security vulnerabilities","description":"The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide\nBy Zero via the function config () of llibmpcodecs/vf_scale.c.\n(CVE-2022-38850)\nCertain The MPlayer Project products are vulnerable to Out-of-bounds\nRead via function read_meta_record() of mplayer/libmpdemux/asfheader.c.\nThis affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.\n(CVE-2022-38851)\nCertain The MPlayer Project products are vulnerable to Buffer Overflow\nvia function gen_sh_video () of mplayer/libmpdemux/demux_mov.c. This\naffects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.\n(CVE-2022-38855)\nCertain The MPlayer Project products are vulnerable to Buffer Overflow\nvia function mov_build_index() of libmpdemux/demux_mov.c. This affects\nmplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.\n(CVE-2022-38858)\nCertain The MPlayer Project products are vulnerable to Divide By Zero\nvia function demux_open_avi() of libmpdemux/demux_avi.c which affects\nmencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder\nSVN-r38374-13.0.1. (CVE-2022-38860)\nThe MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory\ncorruption via function free_mp_image() of libmpcodecs/mp_image.c.\n(CVE-2022-38861)\nCertain The MPlayer Project products are vulnerable to Buffer Overflow\nvia function mp_getbits() of libmpdemux/mpeg_hdr.c which affects\nmencoder and mplayer. This affects mecoder SVN-r38374-13.0.1 and mplayer\nSVN-r38374-13.0.1. (CVE-2022-38863)\nCertain The MPlayer Project products are vulnerable to Buffer Overflow\nvia the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects\nmencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.\n(CVE-2022-38864)\nCertain The MPlayer Project products are vulnerable to Divide By Zero\nvia the function demux_avi_read_packet of libmpdemux/demux_avi.c. This\naffects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.\n(CVE-2022-38865)\nCertain The MPlayer Project products are vulnerable to Buffer Overflow\nvia read_avi_header() of libmpdemux/aviheader.c . This affects mplayer\nSVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1. (CVE-2022-38866)\n","status":"published","published":"2024-03-15T02:49:05Z","modified":"2026-04-16T04:41:48.788528449Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"USN-5895-1","title":"mplayer vulnerabilities","description":"It was discovered that MPlayer could be made to divide by zero when\nprocessing certain malformed media files. If a user were tricked into\nopening a specially crafted media file, an attacker could possibly use\nthis issue to cause MPlayer to crash, resulting in a denial of service.\n(CVE-2022-38850, CVE-2022-38860, CVE-2022-38865)\n\nIt was discovered that MPlayer could be made to read out of bounds when\nprocessing certain malformed media files. If a user were tricked into\nopening a specially crafted media file, an attacker could possibly use\nthis issue to cause MPlayer to crash, resulting in a denial of service.\n(CVE-2022-38851)\n\nIt was discovered that MPlayer could be made to write out of bounds when\nprocessing certain malformed media files. If a user were tricked into\nopening a specially crafted media file, an attacker could possibly use\nthis issue to cause MPlayer to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2022-38855, CVE-2022-38858,\nCVE-2022-38863, CVE-2022-38864, CVE-2022-38866)\n\nIt was discovered that MPlayer did not properly managed memory when\nprocessing certain malformed media files. If a user were tricked into\nopening a specially crafted media file, an attacker could possibly use\nthis issue to cause MPlayer to crash, resulting in a denial of service, or\npossibly execute arbitrary code. (CVE-2022-38861)\n","status":"published","published":"2023-02-27T15:35:41Z","modified":"2026-06-25T13:31:49.357159659Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}