CVE-2023-53874: Gomlab Gom Player

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows attackers to crash the application. Attackers can overwrite the preset name with 260 'A' characters to trigger a buffer overflow and cause application instability.

Affected products

• Gomlab Gom Player: version 2.3.90.5360 only

Published 2025-12-15. Last modified 2026-06-17.