clementine-player/Clementine

clementine-player/Clementine

GitHubGitHub
GitHubgithub.com
www.clementine-player.orgwww.clementine-player.org
Releases584
Frequency1 week 3 days
Last Release
Stars4.21K
:tangerine: Clementine Music Player
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-50986↗
7.3 HIGH—

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file.

CVE-2018-14332↗
—1.9 LOW

An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference in the Init call in the MoodbarPipeline::NewPadCallback function in moodbar/moodbarpipeline.cpp. The vulnerability is triggered when the user opens a malformed mp3 file.