CVE-2021-30145 : A format string vulnerability in mpv through 0.33.0 allows user-assisted remote

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.

Published 2021-05-18 14:15:07

Updated 2022-05-20 20:45:03

Source MITRE

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2021-30145

MPV » MPV
Versions up to, including, (<=) 0.33.0
cpe:2.3:a:mpv:mpv:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

4.48%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 89 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Assigned by: nvd@nist.gov (Primary)

https://devel0pment.de/?p=2217

mpv media player – mf custom protocol vulnerability (CVE-2021-30145) – devel0pment.de
Exploit;Third Party Advisory
https://mpv.io

mpv.io
Product;Vendor Advisory
https://github.com/mpv-player/mpv/commit/d0c530919d8cd4d7a774e38ab064e0fabdae34e6

demux_mf: improve format string processing · mpv-player/mpv@d0c5309 · GitHub
Patch;Third Party Advisory
https://github.com/mpv-player/mpv/releases/tag/v0.33.1

Release v0.33.1 · mpv-player/mpv · GitHub
Third Party Advisory
https://security.gentoo.org/glsa/202107-46

mpv: Format string vulnerability (GLSA 202107-46) — Gentoo security
Third Party Advisory

Jump to