Vulnerability Details CVE-2022-48363
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 67.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2022-48363
-
cpe:2.3:a:musicpd:music_player_daemon:0.10.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.10.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.10.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.10.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.10.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.11.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.11.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.11.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.11.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.11.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.11.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.12.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.12.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.12.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.13.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.14
-
cpe:2.3:a:musicpd:music_player_daemon:0.14.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.14.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.15
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.10
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.11
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.12
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.13
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.14
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.15
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.16
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.17
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.15.9
-
cpe:2.3:a:musicpd:music_player_daemon:0.16
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.16.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.17
-
cpe:2.3:a:musicpd:music_player_daemon:0.17.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.17.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.17.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.17.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.17.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.17.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.18
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.10
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.11
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.12
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.13
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.14
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.15
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.16
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.17
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.18
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.19
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.20
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.21
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.22
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.23
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.18.9
-
cpe:2.3:a:musicpd:music_player_daemon:0.19
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.10
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.11
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.12
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.13
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.14
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.15
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.16
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.17
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.18
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.19
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.20
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.21
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.19.9
-
cpe:2.3:a:musicpd:music_player_daemon:0.20
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.10
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.11
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.12
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.13
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.14
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.15
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.16
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.17
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.18
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.19
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.20
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.21
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.22
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.23
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.20.9
-
cpe:2.3:a:musicpd:music_player_daemon:0.21
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.10
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.11
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.12
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.13
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.14
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.15
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.16
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.17
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.18
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.19
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.20
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.21
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.22
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.23
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.24
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.25
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.26
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.21.9
-
cpe:2.3:a:musicpd:music_player_daemon:0.22
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.10
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.11
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.8
-
cpe:2.3:a:musicpd:music_player_daemon:0.22.9
-
cpe:2.3:a:musicpd:music_player_daemon:0.23
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.23.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.5.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.5.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.6.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.6.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.6.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.7.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.4
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.5
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.6
-
cpe:2.3:a:musicpd:music_player_daemon:0.8.7
-
cpe:2.3:a:musicpd:music_player_daemon:0.9.0
-
cpe:2.3:a:musicpd:music_player_daemon:0.9.1
-
cpe:2.3:a:musicpd:music_player_daemon:0.9.2
-
cpe:2.3:a:musicpd:music_player_daemon:0.9.3
-
cpe:2.3:a:musicpd:music_player_daemon:0.9.4
-
cpe:2.3:o:linuxfoundation:automotive_grade_linux:-