CVE catalog

CVE-2022-38864

mplayer: CVE-2022-38864

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 25, 2026

Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c. This affects mencoder SVN-r38374-13.0.1 and mplayer SVN-r38374-13.0.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmplayersid2:1.5+svn38681-2fixed
Debianmplayerforky2:1.5+svn38681-2fixed
Debianmplayertrixie2:1.5+svn38674-2fixed
Debianmplayerbookworm2:1.5+svn38408-1fixed
Ubuntumplayerpro2:1.2-1vulnerable
Ubuntumplayerpro2:1.2-1build1vulnerable
Ubuntumplayerpro2:1.2.1-1vulnerable
Ubuntumplayerpro2:1.2.1-1ubuntu1vulnerable
Ubuntumplayerpro2:1.2.1-1ubuntu1.1vulnerable
Ubuntumplayerpro2:1.2.1-1ubuntu1.1+esm1fixed
Ubuntumplayer18.042:1.3.0-6build3vulnerable
Ubuntumplayer18.042:1.3.0-6build4vulnerable
Ubuntumplayer18.042:1.3.0-7vulnerable
Ubuntumplayer18.042:1.3.0-7build1vulnerable
Ubuntumplayer18.042:1.3.0-7build2vulnerable
Ubuntumplayer18.042:1.3.0-7ubuntu0.2fixed
Ubuntumplayer20.042:1.3.0-8build4vulnerable
Ubuntumplayer20.042:1.3.0-8build5vulnerable
Ubuntumplayer20.042:1.3.0-8+deb10u1build0.20.04.1fixed
Ubuntumplayer22.042:1.4+ds1-1vulnerable
Ubuntumplayer22.042:1.4+ds1-2vulnerable
Ubuntumplayer22.042:1.4+ds1-3vulnerable
Ubuntumplayer22.042:1.4+ds1-3build1vulnerable
Ubuntumplayer22.042:1.4+ds1-3ubuntu0.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmplayersourcesid2:1.5+svn38408-1not yet assignedNot reported[1021013]
Debianmplayersourceforky2:1.5+svn38408-1not yet assignedNot reported[1021013]
Debianmplayersourcetrixie2:1.5+svn38408-1not yet assignedNot reported[1021013]
Debianmplayersourcebookworm2:1.5+svn38408-1not yet assignedNot reported[1021013]
Ubuntumplayerdebpro2:1.2.1-1ubuntu1.1+esm1Not reportedUBUNTU-CVE-2022-38864Not reported
Ubuntumplayerdeb18.042:1.3.0-7ubuntu0.2Not reportedUBUNTU-CVE-2022-38864Not reported
Ubuntumplayerdeb20.042:1.3.0-8+deb10u1build0.20.04.1Not reportedUBUNTU-CVE-2022-38864Not reported
Ubuntumplayerdeb22.042:1.4+ds1-3ubuntu0.1Not reportedUBUNTU-CVE-2022-38864Not reported

[Debian bug #1021013]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [mencoder]Fixed

    Source package: [mplayer]

    Details (2)

    • 2:1.5+svn38408-1 · amd64 · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

    • 2:1.5+svn38408-1 · arm64 · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

  • [mplayer]Fixed
    Details (2)

    • 2:1.5+svn38408-1 · amd64 · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

    • 2:1.5+svn38408-1 · arm64 · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

  • [mplayer-doc]Fixed

    Source package: [mplayer]

    Details (2)

    • 2:1.5+svn38408-1 · all · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

    • 2:1.5+svn38408-1 · all · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

  • [mplayer-gui]Fixed

    Source package: [mplayer]

    Details (2)

    • 2:1.5+svn38408-1 · amd64 · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

    • 2:1.5+svn38408-1 · arm64 · bookworm

      Fixed · Fixed: 2:1.5+svn38408-1

      dsa · mplayer · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]