Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade libxine | Dec 10, 2025 | Jan 29, 2008 |
| Gentoo Linux | — | Upgrade media-libs/xine-lib. | Oct 30, 2017 | Apr 7, 2006 |
| Suse | — | Upgrade libxine1-gnome-vfsUpgrade libxine-develUpgrade libxine1-pulseUpgrade libxine1-32bitUpgrade libxine1 | Aug 9, 2024 | Jun 28, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub