CVE-2019-9133: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days.

When processing subtitles format media file, KMPlayer version 2018.12.24.14 or lower doesn't check object size correctly, which leads to integer underflow then to memory out-of-bound read/write. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file.

Affected products

• Fedoraproject Fedora: version 29 only; version 30 only
• Kmplayer Kmplayer: up to and including 2018.12.24.14

Published 2019-04-09. Last modified 2026-06-17.