Unrated
An issue in MPV v.0.29.1 fixed in v0.30 allows attackers to execute arbitrary code and crash program via the ao_c parameter.
CVE-2020-19824
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-19824 mpv Fixed in: 0.30.0-1
- Ubuntu UBUNTU-CVE-2020-19824 mpv
References
- report github.com
- web lists.debian.org