Skip to content
OpenAdvisories

Package · Debian

mpd

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-49128

    Music Player Daemon < 0.24.11 Path Traversal via LocalStorage URI Handling

    Music Player Daemon (MPD) before version 0.24.11 contains a path traversal vulnerability in LocalStorage::MapFSOrThrow and LocalStorage::MapUTF8 within the local storage plugin, where the on-disk path is constructed by joining the storage root with a user-sup…

    MusicPlayerDaemon MPD mpd mpd Debian Ubuntu
  • High 8.6
    CVE-2026-49127

    Music Player Daemon < 0.24.11 Stack Buffer Overflow via pcm_unpack_24be

    Music Player Daemon (MPD) before version 0.24.11 contains a stack buffer overflow vulnerability in the pcm_unpack_24be function in src/pcm/Pack.cxx that allows unauthenticated attackers to corrupt stack memory by triggering an off-by-one write in the PCM deco…

    MusicPlayerDaemon MPD mpd mpd Debian Ubuntu