Music Player Daemon
1 CVEs
product
Monthly
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Denial Of Service
Music Player Daemon
NVD
VulDB
CVSS 3.1
7.5
EPSS
0.5%
EPSS 1%
CVSS 7.5
HIGH
POC
PATCH
This Week
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.
Denial Of Service
Music Player Daemon
NVD
VulDB