Skip to content
OpenAdvisories

Package · Debian

mpv

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2026-123095

    mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines

    mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass url_is_safe() to…

    mpv-player mpv mpv mpv Debian Ubuntu
  • High 7.0
    CVE-2020-19824

    An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c param…

    mpv mpv Debian Ubuntu
  • Unscored —
    CVE-2021-30145

    A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via…

    mpv mpv mpv Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-6360

    mpv through 0.28.0 allows remote attackers to execute arbitrary code via a crafted web site, because it reads HTML docu…

    mpv mpv mpv Debian Ubuntu Alpine