{"id":"CVE-2021-30145","details":"A format string vulnerability in mpv through 0.33.0 allows user-assisted remote attackers to achieve code execution via a crafted m3u playlist file.","modified":"2026-05-16T04:03:10.974860838Z","published":"2021-05-18T14:15:07.377Z","related":["openSUSE-SU-2021:0788-1","openSUSE-SU-2021:0798-1"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/mpv-player/mpv/releases/tag/v0.33.1"},{"type":"ADVISORY","url":"https://mpv.io"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202107-46"},{"type":"FIX","url":"https://github.com/mpv-player/mpv/commit/d0c530919d8cd4d7a774e38ab064e0fabdae34e6"},{"type":"EVIDENCE","url":"https://devel0pment.de/?p=2217"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}