https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:03:59 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-05017 cnvd-2022-05017 https://cve.radiocsirt.org/vuln/cnvd-2022-05017 https://cve.radiocsirt.org/vuln/euvd-2026-31340 EUVD-2026-31340 https://cve.radiocsirt.org/vuln/euvd-2026-31340 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40827 <p>Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.</p> <p>Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-40827 https://cve.radiocsirt.org/vuln/ghsa-9v55-ghc6-wfcw <p>Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.</p> <p>Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.</p> https://cve.radiocsirt.org/vuln/ghsa-9v55-ghc6-wfcw https://cve.radiocsirt.org/vuln/gsd-2021-40827 gsd-2021-40827 https://cve.radiocsirt.org/vuln/gsd-2021-40827 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40827 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: clementine, Ubuntu:18.04:LTS: clementine, Ubuntu:20.04:LTS: clementine, Ubuntu:22.04:LTS: clementine, Ubuntu:24.04:LTS: clementine, Ubuntu:25.10: clementine, Ubuntu:26.04:LTS: clementine</p> <p>Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: clementine, Ubuntu:18.04:LTS: clementine, Ubuntu:20.04:LTS: clementine, Ubuntu:22.04:LTS: clementine, Ubuntu:24.04:LTS: clementine, Ubuntu:25.10: clementine, Ubuntu:26.04:LTS: clementine</p> <p>Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing functionality at memcpy+0x265. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine. Attackers could exploit this issue to cause a crash (DoS) of the clementine.exe process or achieve arbitrary code execution in the context of the current logged-in Windows user.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40827