Clementine
Approved changes feed: RSS · Atom
cpe:2.3:a:clementine-player:clementine:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Clementine Player (1b09789c-f8f8-59a1-ae40-ec11cdd96bfb) |
|---|---|
| Product | Clementine (e581cfe4-74bc-528a-9bf9-1440e5a5a996) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/clementine |
purl2cpe | 2026-06-01 10:18:01.514641 |
pkg:deb/ubuntu/clementine |
purl2cpe | 2026-06-01 10:18:01.514644 |
pkg:github/clementine-player/clementine |
purl2cpe | 2026-06-01 10:18:01.514648 |
pkg:rpm/fedora/clementine |
purl2cpe | 2026-06-01 10:18:01.514651 |
pkg:sourceforge/clementine.mirror |
purl2cpe | 2026-06-01 10:18:01.514654 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-40827 |
vulnerable | 2026-06-08 05:35:19.090001 |
Details available
Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.
Published: 2021-12-15T06:37:28.000Z
Updated: 2024-08-04T02:51:07.076Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40826 |
vulnerable | 2026-06-08 05:35:19.089398 |
Details available
Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.
Published: 2021-12-15T06:38:13.000Z
Updated: 2024-08-04T02:51:06.976Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.