CVE-2022-28381: Allmediaserver

Critical severity, CVSS 9.8. EPSS: 70.4% chance of exploitation in the next 30 days.

Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932.

Affected products

• Allmediaserver Allmediaserver: version 1.6 only

Published 2022-04-03. Last modified 2026-06-17.