Skip to content
OpenAdvisories

Package · Ubuntu

mpv

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-123095

    mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines

    mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass url_is_safe() to…

    mpv-player mpv mpv mpv Debian Ubuntu
  • High 7.0
    CVE-2020-19824

    An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c param…

    mpv mpv Debian Ubuntu