CVE-2008-5616: Mplayer

High severity, CVSS 10.0. EPSS: 7.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.

Affected products

• Mplayer Mplayer: up to and including 1.0_rc1; version 0.90 only; version 0.90_pre only; version 0.90_rc only; version 0.90_rc4 only; version 0.91 only; …

Published 2008-12-17. Last modified 2026-06-16.