CVE-2022-38861

The MPlayer Project mplayer versión SVN-r38374-13.0.1, es vulnerable a una corrupción de memoria por medio de la función free_mp_image() del archivo libmpcodecs/mp_image.c

It was discovered that MPlayer could be made to divide by zero when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service. It was discovered that MPlayer could be made to read out of bounds when processing certain malformed media files. If a user were tricked into opening a specially crafted media file, an attacker could possibly use this issue to cause MPlayer to crash, resulting in a denial of service.