PT-2026-41612 · Julia · Mpv Jll

Publicado 2026-05-07 · Atualizado 2026-05-07

OSV

A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.

Identificadores relacionados

JLSEC-2026-476

Produtos afetados

Mpv Jll

Referências · 6

• https://github.com/mpv-player/mpv/releases/tag/v0.33.1 · Nota
• https://github.com/mpv-player/mpv/commit/d0c530919d8cd4d7a774e38ab064e0fabdae34e6 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-476 · Aviso do Fabricante
• https://mpv.io · Nota
• https://security.gentoo.org/glsa/202107-46 · Nota
• https://devel0pment.de/?p=2217 · Nota