Back to CVE Browser

CVE-2018-14332

MEDIUM

5.5

CVSS Severity Score

EPSS Score0.1060%

EPSS Percentile11.46th

PublishedJul 19, 2018

Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.

Affected Platforms (CPE)

📦

Clementine Player

Clementine

= 1.3.1

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html

🔗 https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332

🔗 https://github.com/clementine-player/Clementine/blob/e5ab3e786f9adde12cec3cc90cfe8c1cc6b06320/src/moodbar/moodbarpipeline.cpp#L155

🔗 https://github.com/clementine-player/Clementine/issues/6078

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00038.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00064.html

🔗 https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-14332

Related Vulnerabilities

CVE-2021-408267.8

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing function...

CVE-2021-408277.8

Clementine Music Player through 1.3.1 (when a GLib 2.0.0 DLL is used) is vulnerable to a Read Access Violation on Block Data Move,...

CVE-2018-487210.0

An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006...

CVE-2018-100012410.0

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.p...