Approved changes feed: RSS · Atom
cpe:2.3:a:mpv:mpv:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mpv (b47f302e-5704-58d9-9e77-315761a37523) |
|---|---|
| Product | Mpv (fb2c8bd1-1002-54ef-9b2b-f1665899143d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/mpv |
purl2cpe | 2026-06-01 10:11:37.666848 |
pkg:deb/ubuntu/mpv |
purl2cpe | 2026-06-01 10:11:37.666851 |
pkg:github/mpv-player/mpv |
purl2cpe | 2026-06-01 10:11:37.666854 |
pkg:nuget/mpv |
purl2cpe | 2026-06-01 10:11:37.666857 |
pkg:rpm/opensuse/mpv |
purl2cpe | 2026-06-01 10:11:37.666859 |
pkg:sourceforge/mpv.mirror |
purl2cpe | 2026-06-01 10:11:37.666862 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-30145 |
vulnerable | 2026-06-08 05:31:46.954368 |
Details available
A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.
Published: 2021-05-18T13:34:53.000Z
Updated: 2024-08-03T22:24:59.537Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6360 |
vulnerable | 2026-06-08 05:11:53.652208 |
Details available
mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML documents containing VIDEO elements, and accepts arbitrary URLs in a src attribute without a protocol whitelist in player/lua/ytdl_hook.lua. For example, an av://lavfi:ladspa=file= URL signifies that the product should call dlopen on a shared object file located at an arbitrary local pathname. The issue exists because the product does not consider that youtube-dl can provide a potentially unsafe URL.
Published: 2018-01-28T02:00:00.000Z
Updated: 2024-08-05T06:01:48.942Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.