CVE-2021-30145 - log back

CVE-2021-30145 edited at 13 Apr 2021 22:35:23
Severity
- Unknown
+ Medium
Remote
- Unknown
+ Local
Type
- Unknown
+ Arbitrary code execution
Description
+ A security issue was found in mpv before version 0.33.1. An unverified format string, provided by the user as part of mf:// URI, could result in undefined behavior or a buffer overflow.
References
+ https://devel0pment.de/?p=2217
+ https://github.com/mpv-player/mpv/commit/cb3fa04bcb2ba9e0d25788480359157208c13e0b
Notes
CVE-2021-30145 created at 13 Apr 2021 22:32:07