CVE-2022-38860: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects mencoder. This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

Affected products

  • Debian Debian Linux: version 10.0 only
  • Mplayerhq Mencoder: version svn-r38374-13.0.1 only
  • Mplayerhq Mplayer: version svn-r38374-13.0.1 only

Published 2022-09-15. Last modified 2026-06-17.