CVE-2022-38866: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c . This affects mplayer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.

Affected products

• Debian Debian Linux: version 10.0 only
• Mplayerhq Mencoder: version svn-r38374-13.0.1 only
• Mplayerhq Mplayer: version svn-r38374-13.0.1 only

Published 2022-09-15. Last modified 2026-06-17.