CVE-2009-0698: Xine Xine-Lib

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

Integer overflow in the 4xm demuxer (demuxers/demux_4xm.c) in xine-lib 1.1.16.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a 4X movie file with a large current_track value, a similar issue to CVE-2009-0385.

Affected products

• Xine Xine-Lib: version 1.1.16.1 only

Published 2009-02-23. Last modified 2026-06-16.